Governance & Compliance · Data artifact

Compliance Audit Report

Data artifactGovernance & ComplianceSafety, Security & Governancearc:ComplianceAuditReport

A formal audit output recording overall compliance status, findings graded Critical/High/Medium/Low with evidence, impact, remediation, timeline, owner and status, trends since the last audit, and approvals.

Responsibility. Communicates audit findings and required remediation to accountable owners.

Also known as: Audit report, Audit findings

Direct neighbourhood (hover for relationship types)

Relationships

receives data from dynamic

AI Auditor abstract Ref9.06

sends data to dynamic

is evaluated by assurance

Accountable AI Executive Ch9.8 Ref9.06

Design guidance

MUST assign a responsible owner and timeline to each finding.
SHOULD report remediation rate of previous findings and trends.

Classification

Quality attributes: Transparency and accountability (NIST AI RMF: accountable and transparent)
Frameworks & regulations: ISO/IEC 42001 §9 Performance evaluationISO/IEC 42001 §10 Improvement

Sources

Ref9.06: "Auditing and Compliance Monitoring for AI Systems," unpublished reference note (references/Chapter 9 - Safety, Ethics, and Compliance/06-Auditing-Compliance-Monitoring.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note