[Audit] Audit question list WG may need

[toshiyuki sato <[e-mail]>]

Good Morning

Having thought about this draft charter, overnight, I needed to understand
what needed to be discussed to move forward with this charter.

So, I created a list of questions.

1.Who is the subject of the record?
2.When does the record get written?
3.Why is the record needed?
4.What is the context and content of the record?
5.Who writes the record?
6.Where does the record data reside?
7.How do you protect the record at the point it is written?
8.How does this record relate to other records — across sessions, across
time, across organizational boundaries?
9.Who can view the record, and to what extent?
10.How does an independent party verify the record without trusting who
produced it?

I hope this list helps our discussion here.

Best regards

Tom Sato