The price of an assessment does not establish its quality. A report may identify a useful issue while leaving important areas unexamined. Read the findings, methods and limits before accepting either a sales recommendation or a reassurance.
Ask what funds the work
If an assessment is part of a sales process, ask how that affects its scope and recommendations. Do not assume every no-cost offer has the same funding, method or deliverable.
- Who performs and funds the assessment?
- Which systems and questions are included or excluded?
- What access and evidence are required?
- Will the assessor offer paid remediation or another service afterward?
- Can you keep and share the findings, and under what terms?
Read each finding on its merits
Ask for the observation, supporting evidence, scope, date and business significance. Distinguish a verified issue from a reported concern, a tool alert or an unanswered question. Ask what alternative responses were considered.
A financial interest is a reason to examine incentives and alternatives. It does not by itself prove that a finding is wrong, incomplete or unfair to your current provider.
| Question | What to establish |
|---|---|
| Purpose | The decision the assessment is intended to support. |
| Scope and method | What was examined and how, with exclusions visible. |
| Evidence | Records that support each finding and their limitations. |
| Commercial interests | Relevant resale, referral or implementation interests. |
| Intended use | Sharing permissions and any requirements of an outside reader. |
Five questions before accepting an assessment
- What will you examine, and what will you leave out?
- Will I receive supporting findings or only a summary presentation?
- Which recommendations could earn you additional revenue?
- May I share the report with my current provider or another adviser?
- How would the report describe an area where no issue was found within scope?
Do not treat a refusal to share unrestricted data as proof of bad faith. Ask whether confidentiality, security, licensing or the engagement terms constrain what can be supplied, and what usable alternative is available.
When to consider an independent review
Consider an external independent review when you need a separate examination of evidence about the current arrangement. Agree the question, scope, method and intended use first. Payment or independence alone does not guarantee that an insurer, board or other reader will accept a report.
Read what Actually means by independence and the scope of the Actually Review. Actually does not sell the IT implementation it assesses.
For a first pass yourself, use the ten-question checklist and the provider-evaluation guide. If you are considering offers, compare their scope and assumptions.
