{"id":"AUD-002","section":"Audit & Evidence","requirement":"Export audit and forensic evidence","acceptance":"API, CSV, webhook or evidence package suitable for audit and incident response use.","tier":"Tier-independent","whyItMatters":"Evidence has to leave the console in a form legal, HR and auditors can use.","verificationMethod":"W","verificationTest":"Export an evidence package for one pilot incident.","formerly":"GOV-002","alsoIn":[],"sort":53,"adoptionContext":"Evidence export serves investigation and audit across adoption tiers; the relevant source and access restrictions still follow the records.","mappings":[{"frameworks":["csf","iso","soc2","iso27001"],"explanation":"Exportable AI-event and incident records provide usable information for incident analysis and evidence handling. Preserve source identifiers, times, provenance and integrity through export into the relevant evidence procedure. Format support alone establishes neither accuracy, completeness, chain of custody, recorded investigation actions nor an internal-audit program or incident decision.","kind":"framework","references":{"csf":["RS.AN-07"],"iso":["A.6.2.8"],"soc2":["CC2.1","CC7.3"],"iso27001":["A.5.28"]},"relation":null,"conditions":[]},{"frameworks":["rmf"],"explanation":"Evidence packages make AI-event information available to people responsible for testing, incident identification and information sharing. An export facility is an input to those practices, rather than the complete practice.","kind":"framework","references":{"rmf":["GOVERN 4.3"]},"relation":null,"conditions":[]}],"area":"Audit & Evidence","areaSlug":"AUD","url":"/r/AUD-002","frameworkRefs":{"ISO27001":["A.5.28"],"ISO42001":["A.6.2.8"],"NIST-CSF":["RS.AN-07"],"NIST-AI-RMF":["GOVERN 4.3"],"SOC2":["CC2.1","CC7.3"]}}