Independent review

Step by step

1. Prepare revision Control Owner

   The Control Owner checks the assessment scope, test results, findings and attachments before changing the assessment to review.

   • Defines the evidence package
   • Updates Assessments, Assessment tests, Record attachments

2. Review revision Independent Assurance Reviewer

   The Independent Assurance Reviewer reads the source revision and supporting evidence. They record an approve, reject or return decision with date, reason and operation key.

   • Records independent decision on source revision
   • Updates Review decisions, Assessments
   ApprovalA person approves before the work moves on.

3. Resolve return Control Owner

   If the work is returned, the Control Owner corrects the assessment and submits a new revision for a fresh decision. The prior decision stays in the record.

   • Preserves prior decision and creates corrected revision
   • Updates Assessments, Review decisions

4. Accept approval Independent Assurance Reviewer

   An approved assessment records its approval date. The team then follows any open findings into remediation rather than treating approval as proof that every exception was cured.

   • Records approval while exceptions remain traceable
   • Updates Assessments, Findings

Control Owner

, Independent Assurance Reviewer, Auditor.