DOCUMENTARY GOVERNANCE EVIDENCE

Evidence & Assessment

IGSB examines whether governance arrangements can be demonstrated through documentary evidence, accountable decisions, oversight records and traceable review within a defined scope.

PURPOSE AND SCOPE

How IGSB Approaches Evidence

The G-Series describes governance expectations. Evidence & Assessment examines what can be demonstrated within information submitted for a defined written engagement.

IGSB considers the presence and clarity of governance controls, the traceability of accountability and the sufficiency of evidenced oversight. Findings are limited to the submitted information and the agreed scope.

The process is evidence-led and implementation-neutral. IGSB may identify evidence gaps, evidence deficiencies, unclear accountability or missing traceability, but does not design or operate an organisation's governance controls through the assessment itself.

WORKING DEFINITIONS

Key Terms Used in Evidence Review

G-Series Governance Framework

IGSB's principles-based governance standards covering board, institutional, technology and AI governance.

View the Standards Overview

Governance Evidence Protocol

The controlled methodology used to request, organise, examine and record governance evidence within a defined written engagement.

View the G-Series Governance Evidence Protocol

Documentary evidence

Records or information submitted to demonstrate how a governance arrangement is defined, operated, reviewed or escalated.

Defined scope

The system, function, decision context, period and evidence boundaries agreed for the written review.

Evidence position

The status assigned to an evidence expectation after submitted information has been considered.

Written assessment

A scope-bound written record of what was evidenced, partially evidenced, not evidenced or not submitted within the information reviewed.

AI Governance Evidence Readiness Programme

A structured readiness route that supports preparation of documentary governance evidence for defined review. It does not constitute certification, assurance or confirmation of regulatory compliance.

View the Programme

AI Governance Evidence Passport

A structured record of submitted governance evidence and the evidence position assigned within the defined scope.

View the Passport
EVIDENCE QUALITY

Evidence Principles

Evidence submitted to IGSB is considered against six connected principles. These principles support consistent written treatment of evidence but do not create a pass or fail decision.

Relevance

The information relates directly to the defined scope and the governance expectation being examined.

Traceability

The source, owner, date, version and relationship to the relevant governance claim or decision can be followed.

Sufficiency

Enough information is available to support an evidence position without relying on assertion alone.

Reliability

The origin, status and integrity of the information can be reasonably understood from the submitted material.

Currency

The information reflects the relevant review period or current arrangement, with superseded versions identifiable where applicable.

Consistency

Policies, records, decisions and oversight information align, or any material difference is made explicit.

ILLUSTRATIVE SOURCES

Evidence Categories

Governance evidence may be submitted across several categories. The following examples are indicative and non-exhaustive; relevance depends on the defined scope.

Governance documentation

Terms of reference, governance structures, delegated authorities, accountability maps and committee arrangements.

Policies and standards

Approved policies, standards, principles, control requirements and documented operating boundaries.

Operational procedures and controls

Procedures, control descriptions, approval routes, intervention arrangements and escalation mechanisms.

Decision and oversight records

Decision logs, minutes, approvals, challenge records, review records and evidence of accountable oversight.

Risk, compliance and assurance artefacts

Risk assessments, control reviews, compliance records, internal assurance material and audit outputs submitted by the organisation as evidence.

Training and competence evidence

Role requirements, training records, competence expectations and evidence of relevant responsibility or capability.

CONTROLLED SUBMISSION

Evidence Submission and Handling

Evidence may be submitted in appropriate written or recorded formats, including policies, registers, minutes, reports, logs, structured exports and other documentary records relevant to the agreed scope.

Submitted items should be identifiable by title, owner, date or version and, where practical, mapped to the relevant evidence request or governance expectation.

Organisations remain responsible for ensuring that information is disclosed lawfully and that personal, privileged, security-sensitive or commercially restricted material is redacted where it is not required for the review.

IGSB considers the information submitted. The existence or operation of a control is not inferred from an unsupported statement alone.

These submissions are handled in accordance with the IGSB Privacy Policy and the Legal & Governance Disclaimer.

DOCUMENTED METHOD

How Evidence Is Assessed

IGSB uses a consistent written method to examine governance evidence. The method records evidence positions and material gaps without prescribing how the organisation must implement its controls.

01

Written Scope Confirmation

The system, function, decision context, review period and evidence boundaries are confirmed in writing.

02

Evidence Intake and Mapping

Submitted information is registered and mapped to the relevant evidence request or governance expectation.

03

Evidence Examination

Information is considered for relevance, traceability, sufficiency, reliability, currency and consistency.

04

Evidence Position Consolidation

Each applicable expectation is assigned one of the four approved evidence positions based on the submitted information.

05

Written Output

IGSB records the scope, evidence positions, material gaps and relevant qualifications in a controlled written output.

EVIDENCE POSITIONS

How Evidence Positions Are Recorded

Evidence positions describe what could be demonstrated within the submitted information. They are not pass or fail grades.

Not submitted

No information was submitted against the relevant evidence expectation.

Not evidenced

Information was considered, but it did not demonstrate the relevant evidence expectation.

Partially evidenced

Some relevant evidence was available, but the position remained incomplete, unclear or materially inconsistent.

Evidenced within submitted information

The submitted information sufficiently demonstrated the relevant evidence expectation within the defined scope and review period.

These evidence positions are limited to the submitted information, defined scope and point in time. They do not constitute certification, assurance or confirmation of regulatory compliance.

CONTROLLED WRITTEN ROUTE

Evidence & Assessment Through the AI Governance Evidence Route

For AI governance enquiries, evidence review is entered through a controlled written route. The appropriate stage is determined by scope, submitted information and evidence position.

01

Written Enquiry

Initial written contact and scope information.

02

Evidence Gap Map

Identification of material gaps between stated governance arrangements and available evidence.

03

Governance Evidence Passport

Structured record of submitted governance evidence and its assessed status.

04

G3 Readiness Snapshot

Defined review of evidence readiness against the relevant G-Series expectations.

05

Pre-Assessment Eligibility

Written determination of whether the organisation is ready to enter a controlled pre-assessment.

Route stages are determined by scope and evidence position. Progression is not automatic and does not constitute certification, assurance or confirmation of regulatory compliance.

INFORMATION CONTROL

Records, Retention and Confidentiality

Assessment records are retained in a manner proportionate to the engagement, the defined scope and applicable operational or legal requirements.

Information submitted to IGSB is handled in accordance with the applicable written engagement terms, the IGSB Privacy Policy, and the Legal & Governance Disclaimer.

Organisations remain responsible for lawful disclosure, appropriate redaction and any restriction placed on the use or quotation of submitted material.

CURRENT BOUNDARIES
What Evidence & Assessment Does Not Establish

An IGSB evidence review is limited to the submitted information, defined scope and point in time.

  • Legal advice or a legal opinion.
  • An audit opinion or audit assurance.
  • Certification or accreditation.
  • Confirmation of regulatory compliance.
  • Technical or model-performance validation.
  • Approval to procure, deploy or continue using a system.
  • Confirmation that an AI system is safe.
  • Confirmation of the absence of bias.
  • A guarantee of future performance or the absence of risk.
  • Consultancy, control design or operation of the organisation's governance arrangements.

IGSB does not presently issue certification or accreditation.

WRITTEN ENQUIRY

Begin with a Defined Written Enquiry

Organisations considering an evidence review should begin by providing concise written scope information. IGSB will determine the appropriate route based on scope, submitted information and evidence position.

Submit a Written Enquiry

Written correspondence only.