A.5.32 Audit Checklist

When to use this

Use this during internal audits to test whether A.5.32 Intellectual Property Rights is designed, implemented, operating, and evidenced.

Audit checklist

• IP handling procedures cover software, documents, source code, libraries, trademarks, designs, patents, subscription content, and AI-generated material.
• Software and content inventories map licences to actual use, devices, users, restrictions, renewal dates, and evidence.
• Periodic licence checks sample workstations, servers, cloud tools, and development environments.
• Development contracts and support agreements define source-code and modification rights.
• Open-source and third-party libraries are reviewed for licence obligations before use.
• AI-generated content is reviewed for ownership, input rights, provider terms, confidentiality, and external-use approval.

Evidence requested

• Procedure or register reviewed.
• Responsible owner interviewed.
• Sample records selected.
• Evidence location recorded.
• Gaps converted into findings or corrective actions.

Related notes

• A.5.32 Intellectual Property Rights
• A.5.32 Audit Evidence Pack