The lead auditor produces the Stage Two audit report after the audit, prepared following ISO/IEC 17065, ISO/IEC 17021-1 where it applies, and ISO/IEC/IEEE 29119-3, and checked inside the conformity assessment body before evaluation review. It contains administrative details, the practice statement cross-reference mapping each claim to evidence, test results with indicators achieved and references to full reports, findings by core characteristic with conformities, nonconformities, observations and limitations, component and system-level findings including integration and interoperability, national and local requirements and local indicators, nonconformities with agreed corrective action plans and timelines, supporting evidence references including external certifications relied on, and auditor declarations of impartiality, competence, dates and personnel. The report and its supporting documents form the audit package, checked for completeness, consistency and traceability; outstanding nonconformities are verified closed before submission unless conditional acceptance applies under scheme rules; the package is version-controlled and stored securely for at least six years or two cycles; and the Annex E template is used so the report supports an independent review without clarification from the audit team.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.