Software Violation Notification

I am trying to locate a document that could be used as an audit notification to a department head that a possible software policy violation has occured. Any ideas?