• CPS8 specifies policy to publish immediately on signoff.
  • Slight recursive problem here. Checklist can only indicate where it might be found, and where others have been checked to be found. Attestation can only apply to prior results, such as audits, reports, potentially including this checklist if already published.
  • This clause interpreted to mean (a) policy of publishing this audit, and (b) record of publishing prior audits.
  • Intent could be met via open governance, as per this website.