Okay, let me see if I can get this right. The auditor asked how we assure confidentiality on customer contracts and projects. We do not have a procedure or work instruction that applies to this so the answer was its just implied and information is not shared with other customers or suppliers.
The finding was written up as follows. "There is no evidence that the organization assures confidentiality of customer contracted products and projects."
How do I answer this? Do I need to write something????