Evidence that withstands scrutiny
Evidence that withstands scrutiny
Buyers often treat the level of assurance as a price point. It is not. It is a technical parameter agreed before planning that determines how much evidence is gathered, how deeply it is tested and, above all, how the conclusion may be worded. Choosing it after the quotation has been accepted is the wrong order.
A regulator, a European customer, a lender or a board committee relying on the number for a decision generally points to reasonable assurance. An internal baseline exercise may not.
UsersA regulation, a disclosure framework, a loan covenant or a customer contract may name the level. Where it does, the choice has already been made and the question is only whether you meet it.
RequirementFirst-cycle systems often cannot support reasonable assurance yet. Limited assurance in year one, with the findings used to close the gaps, is a legitimate and common path — provided the report says so.
MaturityIf the organisation intends to make a public claim on the strength of the figure, the level of assurance behind it should be stated wherever the claim is made. A public claim on limited assurance that does not disclose the level is a reputational exposure.
ClaimReasonable assurance costs more because it requires more evidence, not because it is a premium product. The additional effort sits in substantive testing, in wider sampling, and in the corroboration of data that limited assurance would examine analytically.
Where a proposal quotes reasonable assurance at a limited-assurance effort, the arithmetic has to break somewhere — and it breaks in the evidence file, which is exactly where an accreditation body looks during witness assessment. That is a risk to the client as much as to the body: a statement issued on insufficient evidence is a statement that can be withdrawn.
The defensible approach is to state the level, plan the evidence it requires, price that plan, and decline the engagement if the effort cannot be accommodated. We would rather quote a level you can afford honestly than sign a level we cannot evidence.
Editorial note. Author and technical review above are editorial functions. They are separate from the independent technical review and the decision functions required under ISO/IEC 17029:2019, which apply to validation and verification engagements and not to published articles. Nothing on this page is advice on a specific engagement, and nothing here extends or replaces the accreditation records.
Tell us what must be relied on, who will rely on it and by what date. We will confirm the correct programme, evidence requirement and responsible entity — or tell you it is outside our scope.
