Audit and assurance
Check a system from its records, decisions, and halt logs, not from what its operator says.
-
Grade a system's decision records
Check the records a system exports against the conformance level it claims. This is the one tool here that reads evidence rather than answers.
-
Know what each clause asks you to see
Each evidence pack lists the records a clause needs: decision timestamps, deadlines, and what people received. Check the operator's records against it.
-
Read five public failures as worked audits
Each case was established by a court, an inquiry, or a regulator. Each is scored on six safeguards, such as whether the system's permission had an end date and whether anyone had to answer a challenge. Each score cites the clause that names the missing record.
What to run, satisfy, and read
The diagnostics that show risk in this role's work, the standards that apply to it, and the reading behind them.
Other roles
If that was not you
- Engineering — You build or operate the system that makes the decision.
- Policy and compliance — You write the rules the system has to satisfy, or prove to a regulator that it does.
- Operations — You run the appeals, the incident response, or the queues where the system's errors land.
- Design — You shape the interface where a person meets the decision.
- Research — You study these systems and publish about them.
- Executive — You decide whether to deploy, and you carry the liability when it goes wrong.