Assurance Reviews

Not every work needs a full audit, an assurance review has a shorter timeline than a full audit and does typically not assess the entity’s internal control environment, procedures are less extensive and the costs are lower. For example in case of the Cardano roadmap community members like to know if what was promised is delivered before a disbursement is made from the treasure for the performance of the team. This is work for a trusted independent third party vendor/reviewer with deep technical knowledge and experience to verify the performance.

Process

1. Understanding of the requirements and delivery made by the delivery team.
2. Review the delivery meets the individual requirements specified at the start of the project.
3. Clarification requests and critical questions are asked at the delivery team.
4. Review if no shortcuts were taken by the delivery team.
5. Review code, dependencies and documentation, their quality and if they are publicly available and accessible.
6. Review the actual code and individual deliveries work and produce the expected outcomes within certain boundaries.
7. Report findings with request for verification/explanations/repairs by the delivery team
8. Recheck repairs performed by the delivery team

Deliverables

• Documentation of the review process, evidence with conclusions.
• Provide the attestation outcome.

Typical engagement

5–10 business days depending on scope.