Audit Access

Explanation

Audit access checks how quickly the institution can hand over the decision traces an external auditor or regulator asks for — testing not whether the records exist but whether they can be located, assembled, and produced promptly. It matters because in BFSI an inability to deliver evidence on demand is itself a compliance failure: regulators expect that the reasoning behind automated decisions can be surfaced quickly, and slow retrieval signals weak governance even if the data is technically retained. It is measured by External Audit Access Time (the calcMethod is given simply as External Audit Access Time, so report the elapsed time to fulfil a trace request rather than inventing a formula). Implement it by indexing decision traces so they are queryable by decision id, customer, date, and model, providing a controlled export or read-only auditor access path, and logging each request and the time taken to fulfil it as evidence. The threshold requires producing decision traces in less than 48 hours of a request; exceeding 48 hours is a breach that triggers investigation into retrieval bottlenecks — poor indexing, archival latency, manual handoffs — and remediation so the institution can reliably meet auditor and regulator timelines.