Assurance review

A review decision points to an assessment and records its source revision, reviewer, date, decision and reason. Approve, Reject and Return are distinct responses. The reviewer can approve the examined submission, reject it or send it back for work. The decision concerns that revision; a later edit to the assessment should not silently inherit the earlier approval.

Prudential control reviews add control-area and regulator-reference context under an assessment and organization. Their statuses include Draft, Submitted, Approved, Rejected and Completed. The organization can compare review decisions with test evidence and findings, while keeping the reviewer’s judgment separate from the outcome of the parent assessment.

• Submission. Place the relevant assessment revision and evidence before the reviewer.
• Decision. Record a named reviewer, substantive reason and decision for that revision.
• Context. Keep prudential control area, reference and exceptions with the review record.

Agree who may submit an assurance review and who may decide it. A reviewer should be independent of preparing the work being judged. Define what a Return means for revisions and whether a Reject requires a new submission. Keep decision reasons specific enough that the preparer can respond and a later reader can understand what was examined.

Agree how the regulator reference is named and maintained for each organization, and which control area the review covers. The reviewer should be able to locate the referenced material and identify the assessment under review. Agree whether exceptions are counted at review level or read from individual control tests; those numbers should have a documented interpretation before they appear in a report.

Submit a prudential control review for a chosen assessment revision. Include its organization, control area and regulator reference, then have an Independent Reviewer examine the linked tests and findings. Record a Return with a reason asking for clearer evidence. Revise the material and submit again, retaining the earlier decision.

Try an approval against a source revision that no longer matches the submission. The reviewer should examine the current version rather than silently approving the change. Also confirm that an Approved prudential review or an Approve decision does not move the parent assessment by itself. An assessment can still have open findings or remediation work after a review decision.

• Prudential review inbox — Find submitted review records with their control area and source revision.
• Assessments in review — See assessments whose current work is awaiting review.

Follow evidence to a review decision and check the assessment process.