Audit Evidence is the documented information an auditor gathers to determine whether controls are designed and operating effectively. In a data center it includes access logs, maintenance records, change tickets, configuration exports, CCTV footage, policies and interview notes. Sufficient and appropriate evidence underpins SOC 2, ISO 27001 and similar attestations by demonstrating that stated controls actually function.
Category: Security & Compliance · Subcategory: Compliance & Certifications · Part of the AIDC Technical Terminology reference.