nahisaho Audit Response
Draft audit-ready responses with traceable evidence references.
Use This Skill When
- Preparing response packages for external/internal auditors.
- Drafting responses to specific auditor inquiries.
- Assembling evidence packages by control area.
Workflow
- Identify audit scope and specific inquiries.
- Map each inquiry to relevant controls and evidence.
- Draft response with: control description, evidence reference, compliance status.
- Verify evidence completeness and currency (< 90 days).
- Package into audit-ready format.
- Save to files.
Deliverables
results/audit-response.md: audit-ready response package.- Reuse
assets/audit-response-template.mdwhen producing standardized responses.
Quality Gates
- Each response traces to specific control and evidence.
- Evidence is current (< 90 days for operational controls).
- Compliance status explicitly stated per inquiry.
- Document marked "DRAFT — CONFIDENTIAL".
If any gate fails: identify the issue, fix, and re-validate.
Gotchas
- 監査人への回答は「はい/いいえ」ではなく、コントロール説明+証拠参照+コンプライアンス状態の3点セットで行う
- 証拠の適時性（< 90日）を監査人に提出する前に必ず確認すること。期限切れ証拠の提出は信頼性を損なう
- 「N/A」回答には必ず根拠文書を添付すること。根拠なしのN/Aは監査指摘事項になる
Validation Loop
- 監査回答を生成
- チェック: トレーサビリティ、証拠適時性、ステータス明示、CONFIDENTIAL表記
- 不合格なら修正
- 合格後のみ完了