“We sent the email” isn’t proof: how to evidence that a named person read a policy
Read receipts, intranet views, signed PDFs and training-system ticks all leave the same gap. Here’s why per-person, per-version confirmation that reopens automatically when a policy changes is the evidence auditors accept. TL;DR “We sent the all-staff email” is not proof that a policy was read. Sending shows a message went out. It says nothing about[…]