Using a bundle in an audit

A bundle turns a framework into something you can run and show. You point at a control, the requirement it answers, and the recorded activity that backs it. Key points:

• The bundle is the crosswalk; the audit trail is the evidence.
• You demonstrate the mapping and hand over verifiable evidence, while being precise that the bundle itself is not a certificate.