body of evidence

The set of data that documents the information system’s adherence to the security controls applied.