What an auditor asks about a golden record, and the evidence that answers each question.
| # | The point | The evidence |
|---|---|---|
| 1 | Every value carries its source, rule and time | the survivorship view per field |
| 2 | Every source key is kept | the cross-reference as a join |
| 3 | A merge can be undone | unmerge with history |
| 4 | Thresholds are versioned | configuration history |
| 5 | Rule results are stored with the rows judged | rule runs with versions |
| 6 | Hierarchy changes are versions with dates | hierarchy history |
| 7 | Security changes are approved and certified | policy history and the quarterly certification |
| 8 | Sensitive reads are logged with a purpose | the ledger |
| 9 | The audit trail has no cap and includes rule and agent changes | the ledger |
| 10 | A point-in-time read covers master data and transactions | AS OF in SQL |
| 11 | Entries are chained | hash chain |
| 12 | Extracts are signed | the audit pack |
Ask for each item to be shown on screen with your data, and for the query that produces it. A point that needs a report request or a support ticket to answer scores half.
Bring two systems that hold the same customers, suppliers or materials. In one working day we connect them, run the match on live rows, review the queue with your steward and publish the first golden view with its API.
