Technical Audit
Audit scope and evidence
[Control or question]
Architecture health
[Evidence source and date]
Code and dependencies
[Finding severity and impact]
Reliability and operations
[Recommendation and effort]
Security
[Owner and due date]
Data and privacy
[Verification method]
Delivery practices
[Delivery practices: decision, evidence, owner, constraints, and next action]
Findings and priorities
[Findings and priorities: decision, evidence, owner, constraints, and next action]
Remediation plan
[Remediation plan: decision, evidence, owner, constraints, and next action]
Measurement and Ownership
| Measure or deliverable | Baseline or input | Target or acceptance condition | Source | Owner | Review date |
|---|---|---|---|---|---|
| [Availability] | [Current state] | [Target or acceptance condition] | [System or evidence source] | [Accountable role] | [Date] |
| [Defect escape] | [Current state] | [Target or acceptance condition] | [System or evidence source] | [Accountable role] | [Date] |
| [Dependency age] | [Current state] | [Target or acceptance condition] | [System or evidence source] | [Accountable role] | [Date] |
| [MTTR] | [Current state] | [Target or acceptance condition] | [System or evidence source] | [Accountable role] | [Date] |
| [Coverage] | [Current state] | [Target or acceptance condition] | [System or evidence source] | [Accountable role] | [Date] |
| [Critical findings] | [Current state] | [Target or acceptance condition] | [System or evidence source] | [Accountable role] | [Date] |