The set of data that documents the information system’s adherence to the security controls applied.
Source(s):
CNSSI 4009-2015
The totality of evidence used to substantiate trust, trustworthiness, and risk relative to the system.
Source(s):
NIST SP 800-160 Vol. 1
under body of evidence