Review & provenance
“Who reviewed this?” should always have an answer
Netallion keeps the review vocabulary strict and unambiguous: self-assessed, reviewed and independent are distinct states, never used interchangeably. Evidence carries assigned ownership so responsibility is always attributable.
How it works
R0 to R3, under a controlled operating model
'Who reviewed this, were they authorised, and were they independent of the work?' should never be unanswerable.
Review levels R0–R3
Authorisation & separation of duties
Recorded provenance
What you see
The review ladder, and where a claim can stand on it
Netallion fixes in advance what each review level means and which public claim it entitles — the level is derived from what actually happened, never chosen from a menu.
| Level | Who looked at it | What it asserts | Claim it entitles |
|---|---|---|---|
| R0 | System-generated finding | A starting position from the evidence, unreviewed by a person. | self-assessed |
| R1–R2 | Customer self-attestation | Your own team stands behind the finding; ownership is attributable. | self-assessed |
| R3 | Authorised assessor review | An assessor who passed authorisation, competence and separation-of-duties gating reviewed it. | reviewed |
| — | Independence gate passes | A higher, engagement-specific tier; its public wording is legal- and assurance-gated. | independent |
What comes out
Reviewed Readiness, derived — never typed
A clear, defensible distinction between a self-assessed position and a reviewed one — so nobody inside or outside your organisation can mistake one for the other.
Where the boundary sits
“Reviewed” is derived from a real assessor review, never self-declared. A review supports a readiness position; it is not a certification and does not replace an accredited body’s decision.
Readiness, not certification. Netallion provides evidence assurance and readiness assessment; it does not issue or guarantee any formal outcome. Where a framework has a formal certification, attestation, authorisation or conformity-assessment scheme, that outcome remains with the appropriately authorised third party or authority. Where the boundary sits.
Make your readiness defensible
Book a walkthrough of the review model — review levels, assessor authorisation and recorded provenance.