ASSURANCE

Assessment methodology

A consistent path from scope and applicability to findings and limitations.

Assessment lifecycle

  1. Define scope, objectives and boundaries.
  2. Determine applicable requirements and justified exclusions.
  3. Plan sampling, interviews, inspection and technical testing.
  4. Evaluate evidence and control operation.
  5. Classify findings and assign remediation.
  6. Validate corrective action.
  7. Report conclusions, uncertainty and limitations.

Finding record

A finding should state the requirement, observed condition, supporting evidence, impact, severity or priority, responsible owner, target date and validation status.

Limitations

Assessment conclusions are bounded by scope, time, sampling, evidence availability, system change and assessor competence. These constraints should be explicit.

Related methodology

AI Investigation Readiness — Supporting operational methodology for preparing organisations to use AI during investigative activities. It is not a fourth framework, certification programme or assessment standard.