The stakeholder interview records from Phase 4 of the assessment are retained as evidence. Each record documents the interviewee (role, not personal identification where GDPR considerations apply), the interview date, the questions asked, the responses given, and any findings arising.

Interview records from the Technical SME, Business Owner, and Operators collectively demonstrate that the assessment verified the system’s compliance not only through documentation but through direct engagement with the persons responsible for building, governing, and operating it. Findings from interviews (training gaps, communication gaps, process gaps) are recorded in the Non-Conformity Register where they constitute non-conformities.

Key outputs

• Per-interview documentation (interviewee role, questions, responses, findings)
• Verification of compliance through direct stakeholder engagement
• Interview findings linked to the Non-Conformity Register
• Ten-year retention