The second QA roundreads only what changed
An independent reviewer checks each approved version of the Report on Compliance (ROC). Version 2 brings back only changed pages. Every send back, answer and pass keeps a name, a date and a reason.
Independent by rule.
Only a current QSA, AQSA or PCIP who took no part.
Ana Lee can review version 2
Checked again at every pass
A record naming anyone who took part is refused.
The whole report on one map. QA pins only problems: a wording edit, or a page sent back with a reason. The lead answers every page, and the next version brings back only what changed.
A note is needed only with Other. QA review shows plain counts: nothing scores, ranks or times the lead's work.
A note pins to its block.
Ana Lee asks. Maria Reyes changes the words. The pin settles.
A note is needed only with Other. Plain counts: nothing scores, ranks or times the lead.
The record behind
every pass
One record per version. Reviewer, credential, coverage, what was opened, the time.
Every act on the way carries a person and a date. Ready for an Assessor Quality Management review, never rebuilt from email.
QA outside Enpasse counts too.
Download the DRAFT, send it yourself, record the review.
Every version named.
An approved version never changes. A late change starts the next, or is kept with a reason.
Each final file carries a short hash that proves which file went out. A download or a save never makes a version.
Also in Quality review
Kept three yearsIn the files and workpapers download.
The QA record and History go into the files and workpapers download.Section 1.1 filled by ruleThe pass names the reviewer.
The pass writes the reviewer's name, phone, email and credential.Read first, without AIA list worked out by rule.
QA starts from a list worked out by rule, with zero model calls.A lapsed credential holdsQA cannot pass.
QA cannot pass, and the lead is offered a change of reviewer.