Standards interpretation

Evidence sufficiency in relation to digital records continuity

Standards Interpretation

Analysis of evidence sufficiency in relation to digital records continuity separates stated requirements, evidence of operation and continuing effectiveness.

The conditions described by the information preservation during disruption create an exceptional operating context for the applicable expectation. For digital records continuity, evidence may be incomplete and normal controls may be unavailable, but uncertainty should be stated rather than converted into unsupported assurance.

For digital records continuity, implementation should be organised around a decision that can be tested. For the conclusion, evidence is sufficient when it is current, attributable, representative of the relevant scope and capable of being reconciled with other available records.

Application of the evidence to evidence sufficiency in relation to digital records continuity

For decisions concerning digital records continuity, the intended substantive result should remain the starting point for review. Across the defined scope, authorities and providers require evidence of operation and effect, with a route to identify and correct unequal or unintended consequences.

Evidence concerning digital records continuity should be relevant to the stated requirement, sufficiently complete for the affected scope, current for the decision period and attributable to a source with knowledge or control of the matter. Volume does not cure a gap in relevance.

The principal risks in relation to the applicable expectation are unsafe or unsuitable learning arrangements, unequal access to replacement provision, loss or corruption of learner records, and temporary measures becoming permanent without review. For digital records continuity, the control environment should be assessed as a connected system rather than as unrelated individual risks.

In reviewing digital records continuity, readily available material should not define the enquiry if it cannot answer the relevant decision question. For the control, the most relevant material is likely to include a current continuity plan with decision thresholds, welfare referral and safeguarding records, assessment variation approvals, and data backup and recovery tests.

Controls relevant to evidence sufficiency in relation to digital records continuity

A competent review of the applicable expectation should define the proposition to be established, identify the minimum combination of records, test authenticity and reconcile contradictions. For digital records continuity, expand the sample where an exception, complaint or material unexplained variation indicates that the initial evidence may not be representative.

Interpretation of digital records continuity should produce a test that another competent reviewer can apply to comparable evidence.

For decisions concerning digital records continuity, a traceable record enables responsibility to be established and errors to be corrected fairly. For the control, the responsible body should be able to identify the evidence considered, the judgement made, the person or body authorised to make it and the action that followed. The record for digital records continuity should prevent a later amendment from being treated as if it applied when an earlier decision was made.

Review criteria for evidence sufficiency in relation to digital records continuity

The analysis of digital records continuity should remain within the limits of the evidence. Across the defined scope, relevance, integrity and coverage are more important than the number of records produced.

Assessment of the applicable requirement should reconcile more than one source of evidence and control. The final judgement on digital records continuity should connect the applicable expectation to implementation and outcomes while identifying unresolved risk.