How should data and documents be organized to support auditability?

• A. Scattered email folders and handwritten notes.
• B. Centralized repository, version control, timestamped records, and signed-off documents.
• C. Individual spreadsheets on each system without version control.
• D. Public cloud storage with no time stamps.

Answer: (B)

Organizing data and documents for auditability requires creating a traceable, verifiable record of everything: a single place to store information, a clear history of changes, and formal approvals. A centralized repository ensures all documents and data are in one accessible location, reducing the risk of missing items or duplications. Version control tracks every modification, showing who changed what and when, so you can reconstruct the document’s evolution and identify unauthorized or unintended edits. Timestamped records provide an immutable indication of when events occurred, which is essential for validating timelines and regulatory compliance. Signed-off documents capture formal approvals and accountability, demonstrating that the appropriate people reviewed and accepted the content before it was used or released. Together, these practices create a reliable, auditable trail that supports integrity, accountability, and efficient verification during audits.

Scattered email folders and handwritten notes are prone to loss, misplacement, and unclear provenance, making it hard to prove what existed or when it was created. Having only individual spreadsheets on separate systems without a central version control means there’s no authoritative source of truth or change history. Public cloud storage without time stamps leaves the exact timing of data creation or modifications unverified, undermining trust in the data’s integrity and the ability to defend it in an audit.