Section navigation
Canonical DefinitionsConformance ChecklistRecord Surface Map TemplateCustody Surface Map TemplateConfiguration Exposure MatrixFeedback Routing TableAudit Evidence ChecklistConformance Statement TemplateIndependent Assessor GuidanceConformance Model CrosswalkARCS-to-NIST SP 800-53 CrosswalkVerification and Attestation ProtocolLegal and Discovery FrameworkConduit and Custody ModelIndustry Framework Comparison
Annex G: Audit Evidence Checklist
Required evidence for an ARCS conformance claim. This checklist is informative.
Required documentation
- Record surface map (Annex C format or equivalent)
- Custody surface map (Annex D format or equivalent)
- Configuration exposure matrix (Annex E format or equivalent)
- Feedback routing table (Annex F format or equivalent)
- Retention documentation per record class
- Deletion documentation per record class
- Preservation override procedure
- Multi-vendor surface assessment (where applicable)
- Agent runtime documentation (where applicable)
- Non-creation documentation (where claimed)
- Conformance statement (Annex H format)
For Level 4 conformance
All items above plus evidence of:
- Internal verification completed
- Vendor verification obtained for all material custodians
- Preservation posture is operational
For Minimum Profile conformance
All Required items above.
For Enterprise Profile conformance
All items above plus:
- Governed document status for all maps and matrices
- Vendor legal hold capability confirmed in writing
- ARCS governance assigned to named function