Templates

These starter templates help teams turn guidance into reusable requests and records. Adapt them to the product, sector, lifecycle stage, and assurance decision.

Supplier Evidence Request

Decision:
Lifecycle stage:
Risk or failure mode:
Practice or control:
Evidence requested:
Required artifact format:
Producer or owner:
Verification path:
Retention expectation:
Weak answer:
Better answer:
Stronger answer:
Open gaps:

Product Acceptance Record

Product or platform:
Supplier:
Acceptance decision:
Identity evidence reviewed:
Provenance evidence reviewed:
Integrity evidence reviewed:
Transparency artifacts reviewed:
Update and vulnerability records reviewed:
Lifecycle-state evidence reviewed:
Verifier or reviewer:
Decision:
Conditions or remediation actions:
Evidence retention location:

Standards Mapping Record

Practice or evidence need:
Standard, framework, or technology:
Role:
Lifecycle fit:
Evidence supported:
What it does not solve:
Mapping confidence:
Source and version:
Interpretive notes:
Gaps or future profile needs: