Glossary
IT governance evidence terms, in plain English
Short, product-aligned definitions for the checks, registers, review records, and evidence reports lean IT teams use to explain operational governance without overclaiming automation, certification, or legal assurance.
Access review
An access review is a recurring check of who has access to which systems and whether that access still makes sense.
Read definition Access reviewsAccess review completion log
An access review completion log is the immutable record that a review was completed for a period and cadence.
Read definition AssetsAssets register
An assets register records hardware and software ownership, custody, lifecycle status, and review context.
Read definition DomainsDNS evidence
DNS evidence is the recorded DNS snapshot or change context used to explain what public DNS showed at a point in time.
Read definition DomainsDomain governance register
A domain governance register records who owns each domain, why it exists, and how its lifecycle is reviewed.
Read definition Email authenticationEmail sending source
An email sending source is a customer-maintained record of a system allowed or expected to send mail for a domain.
Read definition EvidenceEvidence gap
An evidence gap is a missing owner, status, date, decision, or record that weakens a governance claim.
Read definition ReportsEvidence report
An evidence report packages check results and register records into a readable management or client-facing artifact.
Read definition EvidenceIT governance evidence
IT governance evidence is the dated proof a team keeps to show what was checked, reviewed, decided, and reported.
Read definition EvidenceManagement-ready evidence
Management-ready evidence is operational proof written clearly enough for non-specialists to understand and act on.
Read definition RegistersOperational register
An operational register is a maintained list of ownership, status, dates, and decisions for IT governance work.
Read definition People & accountsPeople and accounts register
A people and accounts register records users, roles, account status, and system access context for reviews.
Read definition ChecksPublic-signal check
A public-signal check reads externally visible facts such as DNS, SSL, domain registration, or vendor-published status.
Read definition RenewalsRenewal decision
A renewal decision records whether a service should renew, change, cancel, or stay under review before the notice deadline.
Read definition RenewalsRenewal risk
Renewal risk is the operational risk created by upcoming renewals, missing owners, unclear decisions, or weak notice tracking.
Read definition DomainsSSL readiness
SSL readiness is the maintained planning record for how a domain's certificate renewal path is handled.
Read definition Access reviewsSystems catalog
A systems catalog is a maintained list of tools and platforms used as the backbone for access reviews and ownership context.
Read definition Vendor statusVendor status page
A vendor status page is the provider-published source for incidents, maintenance, and service state.
Read definitionNeed the longer operating guides?
The glossary defines terms. The resource library shows the practical workflows, templates, and reporting examples behind them.