# Document Stage — Elaboration

## Criteria Guidance

### Good criteria — concrete and verifiable

- "Evidence package includes at least one artifact per control demonstrating implementation with timestamps and provenance"
- "Audit trail links every control to its scope definition, assessment finding, remediation action, and verification evidence"
- "Documentation follows the framework's required format and is organized for efficient auditor navigation"

### Bad criteria — vague (no clear check)

- "Evidence is collected"
- "Documentation is complete"
- "Audit trail exists"

