Audit evidence: The information collected during an audit process to support the auditor’s conclusions. This could involve documentation, data analysis, physical checks, interviews, and other information sources. The evidence should be sufficient and appropriate in quality, and it aids in identifying anomalies, validating compliance, and assessing the effectiveness of controls in place.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D1: Information Security governance | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index