public:99_annexes:annex-b-terms-and-definitions:a:auditability

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
public:99_annexes:annex-b-terms-and-definitions:a:auditability [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1public:99_annexes:annex-b-terms-and-definitions:a:auditability [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 +====== Auditability ======
  
 +[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
 +
 +===== Discussion =====
 +
 +Auditability concerns the ability to inspect, reconstruct, evaluate, and explain actions, evidence, processing steps, decisions, and outcomes.
 +
 +In regulated data interpretation environments, auditability depends on preserved evidence, explicit provenance, traceable relationships, versioned semantic and rule context, identifiable actors or components, and recorded processing history.
 +
 +An auditable system enables an authorized reviewer to determine:
 +
 +  * What information was entered into the system
 +  * What the system observed or extracted
 +  * Which definitions, rules, and parameters applied
 +  * Which versions governed the processing
 +  * Which component or actor performed each action
 +  * What outcome did the system produce
 +  * Why did the system produce that outcome
 +
 +Auditability does not require disclosure of every internal implementation detail. It requires sufficient evidence and traceability to support reliable inspection, reconstruction, and assessment.
 +
 +===== Definition =====
 +
 +//quality permitting inspection and reconstruction//
 +
 +===== Source =====
 +
 +  * Federated Data Interpretation Systems Reference Architecture (FDIS-RA)
 +  * ISO/IEC 27001, Information security management systems
 +  * ISO 19011, Guidelines for auditing management systems
 +
 +===== Note =====
 +
 +Auditability differs from logging. Logs provide one possible source of audit evidence. Auditability depends on the completeness, integrity, context, retention, accessibility, and relationships of the evidence used during an audit.
 +
 +Auditability also differs from traceability. Traceability supports following relationships and derivations. Auditability uses traceability and other evidence to support formal inspection and assessment.
 +
 +===== Example =====
 +
 +A reporting system is auditable when an authorized reviewer can reconstruct how a reported value was extracted, interpreted, validated, changed, and approved using preserved evidence and governed processing records.
 +
 +----
 +
 +<WRAP centeralign>
 +© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
 +</WRAP>