Application handling

Step by step

1. Track application Control Owner

   The Control Owner opens a Draft application under an approved assessment, confirms its organization and applicant, and records the initial deposit when relevant. After sending it to the provider, the owner records the submission time, provider application reference and Submitted status.

   • Keep applicant, submission and provider reference under the correct reviewed parent.
   • Updates Certificate retirements, Assessments, Organizations

2. Record application outcome Control Owner

   The Control Owner checks the provider response, then records the application status and decision date. The Independent Assurance Reviewer's decision remains attached to the parent assessment.

   • Record status and decision date from the provider response; preserve the assessment decision separately.
   • Updates Certificate retirements, Assessments

3. Reconcile outcome Control Owner

   The Control Owner inspects any operation receipt under the same assessment. A Pending, Failed or needs review receipt remains open for investigation. The owner checks effect references against the external result before recording Completed.

   • Investigate a receipt through the shared assessment parent and recorded effect references.
   • Updates Operation receipts, Assessments

Control Owner

Prepares the application, records the provider outcome and investigates receipts; Independent Assurance Reviewer decides the parent assessment; Auditor reads assigned history; App Administrator maintains organization and team records.