- Deliverable
- An evidence register, criterion-mapped findings, a prioritized action list and a leadership readout.
- Customer inputs
- The decision or review approaching, applicable requirements, agreed criteria and approved access to the relevant records.
- Example acceptance criteria
- Every in-scope criterion has a finding or an explicit evidence limitation; each finding identifies the supporting records and recommended next action.
- Scope boundary
- Not system development, penetration testing, model validation or approval to release. Independence is claimed only after checking the required separation, reporting, access and conflicts.
- Effort and price
- Quoted after agreeing the material, access, stakeholders, deliverables and deadline.