Source
What the vendor, an independent party, or an internal stakeholder supplied.
Trust & method
Separate evidence from judgment
A useful vendor review shows how a conclusion was reached without presenting a checklist, score, or document as certainty.
The evidence chain
Claim
The specific statement the source is being used to support.
Finding
The reviewer’s bounded interpretation, including limits and uncertainty.
Decision
The accountable person’s conclusion, conditions, and follow-up plan.
Working principles
Make uncertainty inspectable
Scope before scoring
Define the use case and impact before deciding which questions matter.
Original questions
Adapt prompts to the actual workflow rather than assuming one questionnaire fits every vendor.
Evidence with boundaries
Record what an item covers, when it was produced, and what it cannot establish.
Visible gaps
Do not convert missing information into a favorable assumption.
Human ownership
Keep recommendation, risk acceptance, and ongoing oversight assigned to people.
A practical test
Could another reviewer retrace the reasoning?
If the record does not connect material conclusions to evidence, assumptions, and ownership, it is not yet ready for a consequential decision.