SS-SOC2-001B Evidence Index
Receipts binder index template. Add evidence records, store locally, and export JSON/CSV.
SS-SOC2-001B — Evidence Index
The Evidence Index is the receipts binder 🧾. Add records below; entries save to this device and export as JSON or CSV.
Evidence Records (Local)
Stored on this device. Export for submission to SKYE Security & Trust.
| # | Evidence ID | Domain | Control Name | Type | Source | Cadence | Storage | Owner | Last Verified | Action |
|---|
Minimum Evidence Set (by domain)
- SS-IAM: MFA proof, access review export, offboarding tickets sample, privileged role list.
- SS-CHG: PR approval logs, deployment logs, emergency change record, rollback evidence.
- SS-OBS: audit logs enabled proof, alert rules export, incident alert example, retention settings.
- SS-VULN: scan reports, remediation tickets, patch cadence evidence, secrets scan status.
- SS-IR: IR plan, on-call roster, tabletop notes, post-incident review example.
- SS-DATA: TLS config, encryption-at-rest proof, secret storage proof, retention settings.
- SS-VEND: vendor inventory, vendor access review, attestations where available.
- SS-AVL (if applicable): backup schedule proof, restore test result, DR plan.
- SS-PRIV (if applicable): privacy process docs, DSR log, retention mapping.
- SS-AI (if applicable): key governance, prompt change history, output logging/redaction evidence.
