Back to: Evidence must be traceable to the source and support the stated control requirement.
0
Where did your evidence come from?
For example, as an auditor, you obtain evidence through inquiry, direct observation, screenshot, testing a system or obtaining a file sample such as a configuration file from the client during direct observation, the evidence contains details to include:
-
Date: What is the date of the sample?
Use system date stamps, system date commands or even including the endpoints system date and time display in the screenshot. -
Source: Where did the evidence come from?
Use hostname displays, system commands for host, or other parameters to show the source of the sample.
Related Posts