Use this after a simulated engagement to structure coaching and peer review. It deliberately does not calculate an automated ‘client-ready’ decision; the reviewer should use the actual work, evidence and discussion to decide what further supervised practice is needed.
Defines scope clearly, finds likely Shadow AI, captures intended purpose and keeps unknowns visible.
Relies only on the official software list or implies coverage of systems not actually reviewed.
Assigns roles system-by-system using contracts, branding, development/use facts and supply-chain evidence.
Labels the whole organisation once or equates provider with whoever wrote the code.
Follows the current legal pathway, records evidence and explains exceptions/uncertainties reproducibly.
Uses gut feeling, old dates or broad labels such as ‘HR = prohibited’.
Distinguishes design from operation, challenges weak claims and links conclusions to current evidence.
Treats interviews, policies or vendor marketing as proof without corroboration.
Turns findings into proportionate actions with owners, dates, dependencies and closure evidence.
Produces vague recommendations or compliance scores with no executable plan.
Explains issues calmly in plain English, prioritises what matters and preserves trust while challenging evidence.
Uses alarmist penalty language, overclaims certainty or overwhelms executives with working-paper detail.
Recognises material legal, privacy, security or technical uncertainty and escalates a precise evidence-backed question.
Bluffs through uncertainty, gives unsupported legal conclusions or forwards an unstructured problem to specialists.
Leaves a reconciled inventory, decisions, evidence gaps, remediation roadmap, owners and clear next review triggers.
Leaves contradictions between working papers or unresolved issues that disappear from the final pack.
Record specific strengths, specific gaps, examples from the learner's work, and the next supervised exercise needed. A quiz score alone should never be used as evidence that someone can independently handle a real client engagement.