Glossary

Audit

Also called: auditability

The ability to demonstrate who did what, when, from where and on which object. It rests on per-instance trails recording action, date, time, user and device, for both active and closed instances.

The ability to demonstrate who did what, when, from where and on which object. It rests on per-instance trails recording action, date, time, user and device, for both active and closed instances.

It rests on per-instance trails, not aggregated reports. A monthly report says how many cases breached; an audit asks about one specific case and wants to know who acted, when and on what data.

On this site: Governance & compliance →

Related terms

Code signing

Digitally signing distributed software so that its origin and integrity can be verified before it runs — a supply-chain control, not a formality.

Entitlement

What the organization is licensed to use — contracts, quantities and conditions — as opposed to what a scan finds installed.

Evidence

The set of data, documents, logs, states, decisions, signatures, timings and integrations that demonstrate what happened in a process instance.

Evidence of AI intervention

The record of which model intervened in a process, with what input, what output it produced and what action followed.

Historisation

The preservation of how a data item changes over time, so its value at any past moment can be reconstructed.

Quantum resistance

The property of a cryptographic scheme that a cryptographically relevant quantum computer would not break in any practical sense.

Segregation of duties

A control preventing one person from accumulating incompatible permissions, such as requesting and approving.