Traceability pack
Audit Package Sample
A compact audit package showing how findings, evidence, chronology, and limitations can be handed over for review.
- Assessment
- Northstar CIS Controls v8 readiness
- Generated by
- P86-Assess
- Purpose
- Evidence-to-report traceability
- Status
- Sample
Findings
| Finding | Severity | Status | Source |
|---|---|---|---|
| Vulnerability remediation SLA evidence is incomplete | High | Published | Critical vulnerability remediation SLA tracker |
| MFA policy/export mismatch | Medium | Review | MFA policy and platform export |
Evidence Manifest
| Request | File | SHA-256 | Status |
|---|---|---|---|
| Critical vulnerability remediation SLA tracker | northstar-critical-vulnerability-sla.csv | sample-hash | Under review |
| MFA policy export | northstar-mfa-policy-export.csv | sample-hash | Under review |
Chronology
| Time | Actor | Action |
|---|---|---|
| 2026-07-03 10:00 UTC | Assessor | Assessment launched |
| 2026-07-03 10:15 UTC | Client | Evidence uploaded |
| 2026-07-03 10:20 UTC | System | AI evidence review created |
| 2026-07-03 10:30 UTC | Assessor | Finding created from evidence gap |
| 2026-07-03 11:30 UTC | Assessor | Report draft exported |
Limitations
- Sample package only; it does not contain real client evidence.
- Evidence files are referenced by manifest and hash rather than embedded.
- Production deployments should add tamper-evident audit storage or external archive retention.