Glossary

IT governance evidence terms, in plain English

Short, product-aligned definitions for the checks, registers, review records, and evidence reports lean IT teams use to explain operational governance without overclaiming automation, certification, or legal assurance.

Access reviewsAssetsChecksDomainsEmail authenticationEvidencePeople & accountsRegistersRenewalsReportsVendor status

A

3 terms

Access review

Access reviews

An access review is a recurring check of who has access to which systems and whether that access still makes sense.

Access review completion log

Access reviews

An access review completion log is the immutable record that a review was completed for a period and cadence.

Assets register

Assets

An assets register records hardware and software ownership, custody, lifecycle status, and review context.

D

2 terms

DNS evidence

Domains

DNS evidence is the recorded DNS snapshot or change context used to explain what public DNS showed at a point in time.

Domain governance register

Domains

A domain governance register records who owns each domain, why it exists, and how its lifecycle is reviewed.

E

3 terms

Email sending source

Email authentication

An email sending source is a customer-maintained record of a system allowed or expected to send mail for a domain.

Evidence gap

Evidence

An evidence gap is a missing owner, status, date, decision, or record that weakens a governance claim.

Evidence report

Reports

An evidence report packages check results and register records into a readable management or client-facing artifact.

I

1 term

IT governance evidence

Evidence

IT governance evidence is the dated proof a team keeps to show what was checked, reviewed, decided, and reported.

M

1 term

Management-ready evidence

Evidence

Management-ready evidence is operational proof written clearly enough for non-specialists to understand and act on.

O

1 term

Operational register

Registers

An operational register is a maintained list of ownership, status, dates, and decisions for IT governance work.

P

2 terms

People and accounts register

People & accounts

A people and accounts register records users, roles, account status, and system access context for reviews.

Public-signal check

Checks

A public-signal check reads externally visible facts such as DNS, SSL, domain registration, or vendor-published status.

R

2 terms

Renewal decision

Renewals

A renewal decision records whether a service should renew, change, cancel, or stay under review before the notice deadline.

Renewal risk

Renewals

Renewal risk is the operational risk created by upcoming renewals, missing owners, unclear decisions, or weak notice tracking.

S

2 terms

SSL readiness

Domains

SSL readiness is the maintained planning record for how a domain's certificate renewal path is handled.

Systems catalog

Access reviews

A systems catalog is a maintained list of tools and platforms used as the backbone for access reviews and ownership context.

V

1 term

Vendor status page

Vendor status

A vendor status page is the provider-published source for incidents, maintenance, and service state.