According to industry 'best practice' (e.g. ISO 27001 [1]), every aspect of the total PKI/CA environment must be documented. This is an absolute requirement if the project is to receive the national or international accreditation.
Once accredited, the continued maintenance of these records is essential if the customer is to retain this accreditation. The documentation must be managed and all updates or amendments must have a clear audit trail that is recorded and clearly shows the authorisation process in any document changes. Digi-TaSC sorts and locates all these documents, ensures document updates follow the correct authorisation process and maintains complete audit trails of all transactions.
Links:
[1] https://www.digi-sign.com/compliance/iso/27001