Initial commit

06-audit-and-review/control-review-note-template.md

@@ -0,0 +1,61 @@
+Title: Control Review Note Template
+Document ID: [REVIEW-CONTROL-001]
+Version: 0.1 Draft
+Status: Draft
+Owner: CISO (Paul Jenkins)
+Approver: CISO (Paul Jenkins)
+Classification: Internal
+Effective date: [DD Month YYYY]
+Review date: [DD Month YYYY]
+
+# Control Review Note Template
+
+## Purpose
+
+This template provides a lightweight format for recording periodic review of a specific control, process, or requirement outside a full internal audit.
+
+## Review Details
+
+- Review title: [Title]
+- Control or process reviewed: [Name]
+- Review owner: [Role]
+- Review date: [DD Month YYYY]
+- Review period: [Period]
+
+## Review Objective
+
+[State what the review was intended to confirm.]
+
+## Evidence Considered
+
+- [Document or record]
+- [System output]
+- [Interview or walkthrough]
+
+## Review Outcome
+
+| Area Reviewed | Result | Notes | Follow-up Required |
+| --- | --- | --- | --- |
+| [Area] | [Effective / Partially Effective / Ineffective] | [Notes] | [Yes / No] |
+
+## Issues Or Improvement Notes
+
+[Summarise any concerns, gaps, or good practice observed.]
+
+## Actions
+
+| Action | Owner | Due Date | Status |
+| --- | --- | --- | --- |
+| [Action] | [Role] | [DD Month YYYY] | [Open / Closed] |
+
+## Related Documents
+
+- Internal Audit Procedure
+- Management Review Procedure
+- Corrective Action Procedure
+
+## Version Control
+
+| Version | Date | Description of Change | Author |
+| --- | --- | --- | --- |
+| 0.1 Draft | [DD Month YYYY] | Initial draft. | [Name or Role] |