Northgate: a note for our auditors on the audit log's older entries
Description
Hi, following SUP-1099: our auditors looked at a test export. They will sample Q3 decisions from it, from 1 July, and they ask how the entries marked "from request history" were made and whether they can rely on them. Could you give us a short note to hand them?
Rachel
Linked issues
- relates to SUP-1095 Northgate: Q3 audit, a log of approval decisions Done
- relates to SUP-1099 Northgate: does the audit log go back before 13 August? Done
Comments (5)
Mira, Northgate want a short signed note for their auditors on the backfilled entries (see SUP-1099). Can you?
Thank you. Our audit covers all 12 sites, if that matters for the note.
Hi Rachel, the note is attached, signed: how the older entries were brought in, what each column means, and what entries from before 13 August lack. All 12 sites are covered the same way. You can export 1 July to today yourself: Settings › Audit log, filter by site and dates, then Export.
Perfect. Thanks both.
Hi Rachel, yes. The entries from before 13 August were written once, at launch, from each request's history, which records every decision as it is made. They hold who decided, when, and approve or refuse, plus the reason from 29 July; nothing in them was typed by hand. They lack the address the decision was made from, which we didn't keep before.
I'll ask our security lead for a signed note your auditors can keep.