Controls guidance
Understand a Control Passport
Review the permanent control identity, policy context, evidence, exceptions and provenance for one purchase.
- FOR
- Procurement, Finance, Auditor
- OUTCOME
- Use RAQOZ to review the permanent control identity, policy context, evidence, exceptions and provenance for one purchase.
Before you begin
- Access to the relevant purchase, supplier or policy record.
- Enough source evidence to review the result without relying on copied summaries.
Guidance
- 1
Open the passport associated with the purchase and confirm its permanent Control ID.
- 2
Review the policy version and effective context used for the evaluation.
- 3
Inspect present and missing evidence, supplier-control results and open exceptions.
- 4
Use the passport as an evidence view, not as a compliance certificate or audit opinion.
Evidence RAQOZ retains
- Permanent Control ID
- Immutable evaluation and policy context
- Evidence map, exceptions and provenance
Common issues
Evidence is marked missing.
Open the mapped source record and either add the legitimately missing evidence or preserve the exception. Do not substitute an unsupported conclusion.
A control result must be allowed exceptionally.
Request a bounded, independent waiver or override where supported; keep the original evaluation and rationale connected.
Related articles
Last reviewed 2 September 2026. Review against the current production release before relying on exact screen behavior.