In a security audit, the burden is on you to provide the evidence that you’ve done the right things.
Article Link: https://www.darkreading.com/partner-perspectives/f5/how-to-avoid-the-6-most-common-audit-failures/a/d-id/1329638?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple