Audit evidence

Records, approvals, logs, tests, source data, exports, and documentation that show a control was designed, operating, and reviewed.