Before you start

You need the appropriate review or approval permission. Your organisation’s approval and independence rules still apply.

Step by step

  1. Open the assessment and read its status, owner and next action.
  2. Check evidence provenance and open the sources behind material findings or AI recommendations.
  3. Review unanswered questions, unresolved evidence gaps and any conditions. Ask for amendments where the basis is incomplete.
  4. Use the decision and approval stage if your permissions allow it. Record the rationale and any conditions required.
  5. Confirm the resulting status and check that follow-up actions have owners and due dates.

Check the decision package

Confirm subject, objective, scope and current state. Read the material findings and verify source relevance and currency. Distinguish the analyst recommendation from an approval request and final decision: each can have a different owner and authority requirement.

Record an attributable outcome

  1. Open the current request and inspect what was submitted.
  2. Record the permitted outcome, meaningful rationale and any conditions.
  3. Check the submission result and new state; reload and review again if the service reports a conflict or changed record.
  4. Confirm follow-up owners and due dates.

Resolve the actual approval blocker

Incomplete review, missing evidence, a stale request, insufficient authority and independence rules need different remedies. Reopening a page does not grant authority. If material content changed, review the new request rather than approving it on the strength of a previous review.

What happens next

The decision remains attached to the assessment and its audit history. Conditions and monitoring may require further work after approval.

If something does not look right

If approval is unavailable, check readiness requirements and your permissions. A recommendation is not the same as an accountable approval.