5.7Traceability for Compliance

In regulated industries (healthcare, finance, automotive), traceability is not optional -- it is a regulatory requirement.

What auditors look for:

• Every requirement has at least one test case
• Every test case has been executed for the release
• Every failure has a documented resolution (fixed, accepted risk, deferred)
• Test evidence is preserved (screenshots, logs, reports)
• The trail from requirement to test to defect to fix is unbroken