- Primary reviewer
- Compliance Manager, audit coordinator, control owners, Internal Audit, Legal, or authorized executive
- Use when
- Before an internal, external, or regulatory review when scope, controls, evidence, sampling, walkthroughs, gaps, corrective actions, access, confidentiality, and readiness must be organized.
- Assurance question
- Is the evidence package complete, current, traceable, accessible to authorized reviewers, honest about gaps, and ready for the defined audit scope?
- Core evidence
- Audit authority and scope, request list, control mapping, owners, current versions, evidence references, sample periods, walkthroughs, confidentiality, gaps, actions, due dates, dry run, limitations, and readiness approval.
- Not for
- Certifying compliance, predicting the auditor conclusion, hiding open gaps, or replacing auditor, regulator, legal, or specialist requirements.