Traceability
The property of a well-structured report in which every recommendation can be matched to a specific finding, every finding can be matched to specific facts, and every fact can be matched to a named source. A report with a break anywhere in this chain has a structural gap a careful reader can locate and should flag.
Defined in 3 GAGE programs, which carry 7 distinct definitions of it. The wording above is taught in Engineering Judgment and Professional Formation.
How each discipline defines it
The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.
The property of a well-structured report in which every recommendation can be matched to a specific finding, every finding can be matched to specific facts, and every fact can be matched to a named source. A report with a break anywhere in this chain has a structural gap a careful reader can locate and should flag.
The discipline of ensuring that every claim in an executive briefing can be traced to a specific section of the underlying compliance dossier; the property that makes a briefing defensible under challenge and separates a presentation backed by real evidence from one that only sounds confident.
The property that any claim can be followed through the chain in either direction without a gap. It is the difference between an opinion and a case, and it is what an examiner, an auditor and a regulator are all testing for.
The property of being able to follow a claim back through the chain to something verifiable. The difference between an opinion and a case.
The property that lets another competent person re-walk the author's path from the page alone, answering where each claim came from, what it depends on, and what depends on it.
Where it is taught
The exact lessons this term appears in. The first module of every program is free with a free account.
- How this program works, and setting up your workspace · Your First Week in Governance, Risk and Compliance, Certified Enterprise Governance, Risk and Compliance Professional (CEGP)
- Your portfolio, and what an artifact has to earn · Your First Week in Governance, Risk and Compliance, Certified Enterprise Governance, Risk and Compliance Professional (CEGP)
- The GRC information model · Integrated Governance, Risk and Compliance and Enterprise Context, Certified Enterprise Governance, Risk and Compliance Professional (CEGP)
- The obligations register and traceability · Compliance Management Systems and Regulatory Intelligence, Certified Enterprise Governance, Risk and Compliance Professional (CEGP)
- Workpapers and documentation quality · Internal Audit, Assurance, and Evidence, Certified Enterprise Governance, Risk and Compliance Professional (CEGP)
- Presenting and Defending Compliance to Executives · Capstone: The Compliance Portfolio, EU AI Act Implementation Expert
- Reading and writing a post-incident report · Failure Analysis, Learning From How Robots Break, Engineering Judgment and Professional Formation
Where it shows up at work
A definition is where Traceability starts. The lessons above teach it inside the competencies below, which are what job descriptions ask for and what the GAGE credential records. Every link here is drawn from the same careers map that builds a role's readiness check.
Collects, labels and preserves the evidence that a control operated, a decision was made, and a claim can be defended to an auditor or regulator.
2 lessons on this page teach it as a primary outcome.
Turns technical uncertainty into a one-page decision: material risks, trends, exceptions, remediation, and what the board is being asked to accept.
One lesson on this page teach it as a primary outcome.
Scopes an AI audit, sets criteria, samples, interviews, tests, writes findings with condition, criteria, cause, effect and recommendation, and tracks remediation.
One lesson on this page teach it as a primary outcome.
Roles that hire for it
Each role page shows the full competency set, what the seat decides, and a readiness check against your own evidence.
- Chief Audit Executive, AI audit editionneeds it at depth
- Senior AI Compliance Analystneeds working knowledge
- AI Program Managerneeds it at depth · 11 open postings this week
- AI Auditorneeds it at depth · 9 open postings this week
- AI Incident Response Leadneeds working knowledge · 1 open posting this week
- AI Compliance Specialistneeds working knowledge · 1 open posting this week
How job descriptions say it
Postings rarely use the textbook word. These are the phrases the careers map reads as asking for the competencies above.
Where the frameworks place it: EU AI Act Articles 11 and 12; ISO/IEC 42001 Clause 7.5; Global Internal Audit Standards; ISO/IEC 42001 Clause 9.2.
One interview question about it
What evidence would you have ready before an auditor asks about an AI system, and how do you produce it as a byproduct of the work?
Asked of candidates for evidence collection and audit-ready documentation. Answering it in your own words is exactly how a GAGE topic is passed, and the credential records the pass where an employer can check it.
If you come from another field
Some backgrounds already carry this competency, and the readiness check gives credit for it.
- Compliance and regulatory affairs carries it as work you can show: Audit-ready documentation is what you produce.
- Internal audit and IT audit carries it as work you can show: Evidence evaluation is the profession.
- Project and program management carries it as a claim to back up: Decision logs and repositories are familiar.
Terms it appears with
Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.