1.8 KiB
Title: Audit and Review Evidence Log Template Document ID: [REVIEW-EVIDENCE-001] Version: 0.1 Draft Status: Draft Owner: CISO (Paul Jenkins) Approver: CISO (Paul Jenkins) Classification: Internal Effective date: [DD Month YYYY] Review date: [DD Month YYYY]
Audit And Review Evidence Log Template
Purpose
This template provides a simple log for tracking evidence collected or referenced during audit and management review activity.
Scope
This log applies to evidence used in internal audits, management reviews, control reviews, and follow-up assurance activity.
Data Fields / Expected Columns
The log should record at least:
- evidence reference
- activity type
- related audit or review
- evidence description
- source location
- owner
- date collected or reviewed
- reviewer
- notes
Ownership
This log should be owned by CISO (Paul Jenkins) or a delegated assurance coordinator.
Update Frequency
The log should be updated as evidence is requested, reviewed, or added to an audit or review pack.
Retention
Completed logs should be retained with the associated audit or review records in line with retention requirements.
Template Table
| Evidence Reference | Activity Type | Related Audit / Review | Evidence Description | Source Location | Owner | Date Collected / Reviewed | Reviewer | Notes |
|---|---|---|---|---|---|---|---|---|
| [EV-001] | [Audit / Management Review / Control Review] | [Reference] | [Description] | [Path / system / link reference] | [Role] | [DD Month YYYY] | [Name / Role] | [Notes] |
Related Documents
- Internal Audit Procedure
- Management Review Procedure
- Evidence and Audit Readiness Guidance
Version Control
| Version | Date | Description of Change | Author |
|---|---|---|---|
| 0.1 Draft | [DD Month YYYY] | Initial draft. | [Name or Role] |