Controls · The evidence trail · Element

The artefact

What is produced when the control operates.

The part

What it is

System logs, signed approvals, timestamped records and reconciliation outputs are all evidence produced as a by-product.

A record created specifically to serve as evidence is weaker, because it can be created without the control having operated.

The smallest level

The attributes it carries

Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.