Documents lack a conclusion
Questionnaires, reports, contracts, and certificates accumulate without being tested against the purchased service.
Open Assurance · Verify
See the third-party risk behind the contract
Independently examine critical suppliers, dependencies, due diligence, and monitoring so leaders can make better sourcing and risk decisions.
The business pressureName what must change.
The dependency is poorly understood
Data access, criticality, integration, concentration, and replacement constraints are missing from the review.
Oversight fades after onboarding
Supplier changes, incidents, exceptions, subcontractors, and renewals receive inconsistent follow up.
01 · What we deliver
What we examine and report.
We begin with the decision the intended user needs to make. The work then shows what the evidence supports, where gaps remain, and what requires action.
Supplier assurance terms
Selected suppliers, services, dependencies, period, criteria, evidence, access, exclusions, and users.
Dependency profile
Service criticality, data access, integrations, subcontractors, concentration, recovery reliance, and substitution constraints.
Evidence examination
Independent review of selected questionnaires, reports, contracts, issues, approvals, exceptions, and monitoring proof.
Oversight examination
Review of onboarding, change monitoring, incident handling, periodic review, escalation, renewal, and termination.
Supplier findings register
Observed gaps, affected dependencies, evidence, response options, open questions, and limitations.
Independent supplier report
A scoped view of evidence, observations, findings, limitations, and matters for management decision.
Evidence you can use
Evidence your team can use after delivery.
Each output identifies its source, owner, review point, and next action so the work stays traceable after handoff.
What you receive
- Supplier assurance terms
- Dependency profile
- Evidence examination
- Oversight examination
- Supplier findings register
- Independent supplier report
How it stays useful
- Source
- Current source material
- Owner
- Named owner
- Timing
- Relevant period
- Status
- Review status and decision
02 · The Open method
From a precise question to a usable conclusion.
The question, evidence, testing, and conclusion remain easy to follow. Leaders can see what was examined, what was found, and how the result should be used.
Define
Agree the decision, audience, subject, expectations, timing, dependencies, and type of review before testing begins.
Examine
Review the relevant records, configurations, conversations, and technical evidence. We test whether it is current, reliable, and sufficient for the question.
Challenge
Follow exceptions, conflicting evidence, and gaps. The conclusion follows what the work shows, not the preferred story.
Communicate
Explain findings, implications, uncertainty, and the next decision in language the audience can use.
03 · Clear roles
Keep authority clear at every handoff.
Open leads the agreed work. Your team keeps management decisions. Independent reviewers and qualified specialists retain the authority only they can hold.
One clear assurance question
Before we begin, we confirm the question, evidence, review approach, audience, and reporting format. Any change remains visible.
Management keeps ownership
Your team remains responsible for systems, controls, records, remediation, and the information it provides. We examine; we do not take over management decisions.
Use the right qualified provider
If law or a professional standard requires a licensed or accredited report, we make the qualified delivery path clear from the start.
Business results
What changes after the work.
The result should change what the team can do next: reduce exposure, operate a stronger control, answer scrutiny, or make a decision with better evidence.
The review reflects the service
Supplier documents are interpreted against the actual dependency, data, integration, and contract.
Follow up targets important gaps
Teams direct questions and safeguards toward weaknesses that affect the relationship.
Management decisions remain explicit
The report separates observations from procurement, renewal, acceptance, and exit choices.
Common questions
What to settle before work starts.
Direct answers on fit, timing, responsibilities, deliverables, and the next commercial step.
Which suppliers warrant deeper assurance?
Depth should reflect criticality, sensitive data, privileged integration, concentration, recovery reliance, and difficulty of substitution.
How are reports and questionnaires used?
They are evidence sources. We examine scope, period, exclusions, exceptions, and relevance to the purchased service.
What if a supplier withholds evidence?
We record the missing evidence and resulting uncertainty so management can seek more assurance, add safeguards, accept uncertainty, or reconsider.
Can this support onboarding or renewal?
Yes. It can inform sourcing, onboarding, renewal, expansion, or remediation while management retains the decision.
Does this approve the supplier?
No. It does not certify the supplier, guarantee performance, or transfer accountability from the organization.
Open Assurance
Get a clearer view of critical suppliers
Identify the dependency, decision, and evidence your procurement, risk, or board stakeholders need.