Journal
Building an audit trail that survives follow-up questions
Boards rarely ask only once. The second question arrives days later, often from someone who missed the first meeting. Your trail must open without you in the room.
Minimum set of artefacts
Keep an owner register, sampling sheets with dates, exception-queue exports, and the board narrative draft with version stamps. Link each artefact to the cost centre codes in your cost center audit app rather than storing them as orphaned files.
Retention with intent
Decide how long sampling evidence lives. Networksysmonitor recommends aligning retention with your internal audit policy and United Kingdom record-keeping expectations for financial analysis workpapers — then actually deleting what you say you will delete.
Access that matches roles
Controllers need edit rights; many stakeholders need read-only. Oversharing editable sheets invites silent drift. Treat the trail with the same care you give the ledger.