Validity of the evidence
Is each piece of evidence still current, and is its date compatible with the client's requirement?
Topic
The second assessment is the hard one.
A supplier's first assessment accepts intentions. The second checks what was delivered. That is when a file built once and then abandoned turns against you.
What changes in twelve months
Your people move: the person named as owner of a control has changed role, and the answer still cites their name. Your providers move too: the host mentioned in three answers is no longer the one you use.
Your practices evolve, usually for the better, and the library does not reflect it. We regularly see files that understate what the company actually does, simply because nobody updated the answers after an improvement.
Finally the frameworks themselves change, and clients add questions from one year to the next, particularly on subcontracting and on the use of artificial intelligence services.
What the review checks
Accuracy of the owners
Do the people named in the answers still hold that role, and do they know it?
Deadlines held
Have the gaps declared at the previous assessment been closed within the announced timeframe?
One piece of advice that costs nothing
Keep a last-verified date next to every answer, even if you do this work without us. It is the most useful information in the file and the one that is almost always missing. It tells you at a glance what is still defensible and what is not.
Request an assessment
Let's talk about the next questionnaire
Tell us who is asking, by when, and what usable evidence you already hold. We reply within two working days, in English, French or German.
- Swiss engineering
- Reply within two working days
Email Certenor
A questionnaire on your desk and a short deadline? That is the right moment to write to us.
Email Certenor