# Audit Documentation Standards

## Required Conventions

- ALWAYS include executive summary
- ALWAYS define clear scope
- ALWAYS categorize findings by severity
- ALWAYS provide actionable recommendations

## Best Practices

- Use consistent severity ratings
- Track finding status
- Include evidence where applicable
- Schedule follow-up audits