ISMS/06-audit-and-review/README.md

Audit And Review Artefacts

This folder contains working artefacts and output templates used to operate the ISMS assurance and review cycle.

Unlike the controlled policy, standard, procedure, and register set, documents in this folder are intended to support execution of audit, management review, and periodic control review activities. Some artefacts may become records of performed activities once completed.

Current Artefacts

• internal-audit-report-template.md
• internal-audit-working-paper-template.md
• management-review-pack-template.md
• control-review-note-template.md
• audit-and-review-evidence-log-template.md

How To Use This Folder

• Use the procedure set in ../03-procedures to determine when and how the activity should be performed.
• Use the templates in this folder to capture working notes, outputs, and review evidence consistently.
• Where a completed artefact becomes part of the formal ISMS record, retain it in line with document and records retention requirements.