How to Ease Compliance with the Audit Trinity - Evidence (
Page 4 of 7 )
Evidence is proof that the policy and the control process are being
followed. In this example of network IDs, the evidence would consist of
several components:
• Documentation that contains the policy and the control process
• Authorizations provided to create network IDs, whether it be e-mail, paper or a record in an online system
