NC-C9-missing-evidence-02 — Named evidence is present, but effectiveness is not shown.
This page follows the certification-audit detailed-report fields. Assessment Results stay the kernel original. Requirement cites the catalog ID and catalog title — not ISO shall-prose. Stage 1/2 is not invented. NC-RP and CAR stay journal citations.
| Clause / control | 9.2 |
|---|---|
| Area / owner | c9 |
| Requirement | 9.2 Internal audit |
| Finding | 9.2 Internal audit is named in this pack, but there is no effectiveness evidence. Cited implementation: IAP, CAR, MRMT, IAPC. |
| Grade | minor |
| Path | Requirement ↔ evidence |
| Procedure | 10.2 |
| Topic | c9 |
| Volume | 1 |
Objective evidence
This pack names a policy or an implementation, but there is no effectiveness evidence. The pointers below are those cited artefacts.
Cited artefacts: IAP, CAR, MRMT, IAPC.
Subject in this pack: 9.2.
No opened file is attached. That is expected when the gap is “nothing in the pack” or “named but not evidenced” — there is no SHA-256 to show until the kernel opens a file.