9.3 Periodic Audits

The Policy

Conduct periodic audits [12 month] of repositories to ensure compliance. Use automation to assist in auditing and reporting. Form an Audit Team from Software Community of Practice where members can be rotated.

The Implementation

• Add team tags to your repositories so you can keep track
• Archive the old to reduce your work!
• 12 months is recommend but regular and more automated checks are advised.
• There will be central alerts to help enforce, they are there to help support you not hinder.
• Embrace a sense of continual improvement.