IT provides factual evidence, system insight, and technical explanations during investigations.

Why this matters

Regulators rely on IT evidence to assess scope, impact, and control effectiveness.

Typical IT responsibilities

• Supplying logs and access records
• Explaining system architecture
• Supporting data mapping and impact analysis
  
  

What IT should avoid

• Speculation
• Incomplete timelines
• Ad‑hoc evidence gathering
  
  

Evidence of maturity

• Centralised, retrievable records