SPHIOR
SPHIOR
Guides
Technical questions auditors ask, answered from how the systems actually work.
- Evidence
How to Present GitHub Change Management as Evidence for ISO 27001 and SOC 2
Change management audits ask whether every change reached production with approval. What to enforce in GitHub, why screenshots fall short, and how to keep a full record.
- Evidence
AI Audit Log Design Guide: The AI Usage Evidence Required by the EU AI Act, ISO/IEC 42001 and Japan's AI Guidelines, and How to Keep It
How to design audit logs that explain generative AI and agent use to auditors and customers: what regulations require, what to log, where, and what makes it evidence.