- Assessment depth and question set:
- Ask to see the full questionnaire and the areas scored. Check that it covers operations and suppliers separately, and record which questions are fixed and which can be changed.
- Risk categorisation logic:
- The page states suppliers are categorised by risk level. Ask how the level is calculated from answers and geography, and retain the method document with your records.
- Action plan tracking:
- Create a test finding and check who owns the action, how due dates and evidence are recorded, and whether the status carries into the following year. The page mentions action plans but not these details.
- Jurisdiction outputs:
- The product page names Australia, the UK and Canada; the home page adds California and Europe. Request a sample output for each regime you report under and compare its headings with the statutory criteria.