Choose a Method for a Defined Question
A desk check, visit and third-party assurance can provide different evidence. None is a universal guarantee of integrity or delivery. Define what you need to establish, the risk if it remains unknown and what kind of reviewer has the competence and authority to assess it.
This original comparison uses a fictional prospective partner whose purchasing review during staff absence is unclear. Its current policy and selected records are available. A visit has costs and access implications; no method has yet been commissioned or accepted.
Compare the Lenses
| Method | What It May Help Establish | Limits and Burden |
|---|---|---|
| Desk review of current permitted records | Identity, stated roles, terms and evidence recorded in selected transactions | Documents may be outdated or incomplete; a policy's existence does not establish actual operation |
| Planned remote or on-site walkthrough | How relevant staff explain and demonstrate a process; questions and contradictions can be explored | One demonstration is selected and may not represent routine practice. Staff time, language, access, safety and privacy need planning |
| Properly scoped third-party assurance | An independent competent practitioner's conclusion within an agreed subject, period and assurance standard | The title audit or review does not establish coverage. Inspect scope, exclusions, competence, independence, date and permitted reliance |
For the absence-control question, a desk review may reveal that the policy names a former staff member. A walkthrough can test the claimed current backup using a safe fictional transaction. A specialist assurance engagement might test a wider period or control population, if justified and properly scoped. None alone establishes that the proposed community activity will achieve its intended results.
Design a Proportionate Sequence
Start with relevant existing evidence the organization can lawfully use. If it answers the question adequately, a visit merely to complete a checklist may create burden without new assurance. If a consequential gap remains, select the next check that could actually resolve it. State why a less intrusive approach is insufficient before requesting sensitive originals or travel.
For a walkthrough, agree the purpose, people, language/access arrangements, permitted records, questions and how findings will be checked with the partner. Protect participants from unnecessary disclosure. Do not ask staff to demonstrate a live payment or expose credentials simply to prove that a system works. An observed performance should be described with its actual conditions.
Read a Third-Party Report Before Relying on Its Label
Suppose a supplied report concerns last year's financial statements for a different legal entity. It cannot automatically resolve the current partner's operational backup. Even a correctly matched audit may not test the particular control or activity in question. Ask the qualified finance/assurance owner how much reliance is appropriate and whether further evidence is needed.
The partner also needs clarity about who pays, who receives the report, what will be retained, how factual errors can be corrected and what confidentiality limits apply. External involvement does not remove the funder's responsibility to make its own authorized decision.
Record Findings, Not a Method Trophy
An adequate record says which question was checked, with what evidence, by whom, during which period, what was found and what remains unknown. Completed visit is an activity, not a substantive conclusion. Keep actual adverse evidence distinct from a document gap and translate the finding into a relevant condition, support or decision.
For an evidence-format conflict, use the two-sided alternative-evidence exchange. No source or fictional example here declares any method legally sufficient for a real award.
Source and Scope
GovS 015 risk and assurance guidance, Due Diligence/Assurance, is UK government guidance for specified grants. The comparative method design here is original; a qualified owner must determine actual assurance scope and reliance.