RRAQOZ
Sign in

Controls guidance

Map control evidence

Connect required evidence to the source records that demonstrate how a purchase was handled.

FOR
Organisation administrator, Procurement, Auditor
OUTCOME
Use RAQOZ to connect required evidence to the source records that demonstrate how a purchase was handled.

Before you begin

  • Access to the relevant purchase, supplier or policy record.
  • Enough source evidence to review the result without relying on copied summaries.

Guidance

  1. 1

    Start with an approved policy requirement or control objective.

  2. 2

    Map it to the source record that provides the evidence rather than a copied summary.

  3. 3

    Mark imported historical records with their provenance and evidence-only boundary.

  4. 4

    Review missing or ambiguous mappings before relying on an evaluation.

Evidence RAQOZ retains

  • Control requirement
  • Mapped source record
  • Provenance and missing-evidence state

Common issues

Evidence is marked missing.

Open the mapped source record and either add the legitimately missing evidence or preserve the exception. Do not substitute an unsupported conclusion.

A control result must be allowed exceptionally.

Request a bounded, independent waiver or override where supported; keep the original evaluation and rationale connected.

Related articles

Use the approved supplier listApply the organisation's approved-supplier decision without presenting it as a universal endorsement.Review control exceptionsInvestigate control failures or missing evidence while preserving the original evaluation.

Last reviewed 2 September 2026. Review against the current production release before relying on exact screen behavior.