Self-review
A self-review checklist for your next buyer review.
Use these prompts to prepare a conversation. This checklist does not score or predict certification.
Check your evidence
- Can you list each agent, model, tool, identity and data flow in scope?
- Can you show the permitted actions and the enforcement point for each?
- Have you tested data exports and other consequential operations with synthetic data?
- Are approvals bound to the exact target and arguments?
- Can you trace a finding to a change and retest?
- Do you know what has changed since the last review?
- Are untested paths, exceptions and remaining risks visible to the buyer?
If an answer is unclear, record the gap and identify its owner. There is no readiness band or pass/fail score generated from these answers.
What to do with a gap
Bring the buyer's questionnaire, architecture and known gaps to a scoping conversation. For a formal review, agree requirements, authorised tests and evidence before drawing conclusions.
Start with a clear scope
Tell us which systems, actions and review requirements are in scope. We will discuss the work, responsibilities and deliverables before you commit.