Title: Audit and Review Evidence Log Template Document ID: [REVIEW-EVIDENCE-001] Version: 0.1 Draft Status: Draft Owner: CISO (Paul Jenkins) Approver: CISO (Paul Jenkins) Classification: Internal Effective date: [DD Month YYYY] Review date: [DD Month YYYY] # Audit And Review Evidence Log Template ## Purpose This template provides a simple log for tracking evidence collected or referenced during audit and management review activity. ## Scope This log applies to evidence used in internal audits, management reviews, control reviews, and follow-up assurance activity. ## Data Fields / Expected Columns The log should record at least: - evidence reference - activity type - related audit or review - evidence description - source location - owner - date collected or reviewed - reviewer - notes ## Ownership This log should be owned by CISO (Paul Jenkins) or a delegated assurance coordinator. ## Update Frequency The log should be updated as evidence is requested, reviewed, or added to an audit or review pack. ## Retention Completed logs should be retained with the associated audit or review records in line with retention requirements. ## Template Table | Evidence Reference | Activity Type | Related Audit / Review | Evidence Description | Source Location | Owner | Date Collected / Reviewed | Reviewer | Notes | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | [EV-001] | [Audit / Management Review / Control Review] | [Reference] | [Description] | [Path / system / link reference] | [Role] | [DD Month YYYY] | [Name / Role] | [Notes] | ## Related Documents - Internal Audit Procedure - Management Review Procedure - Evidence and Audit Readiness Guidance ## Version Control | Version | Date | Description of Change | Author | | --- | --- | --- | --- | | 0.1 Draft | [DD Month YYYY] | Initial draft. | [Name or Role] |