Conclusions and owner decisions

Understand the outcome

A completed third-party assessment can still have a pending decision. Accept residual risk and Treatment required await the owner recorded in the assessment. When that owner is also the assessor, approval is recorded automatically during completion.

Further review required and Decision deferred remain pending outcomes with the applicable target or due date. They do not mean that the relationship has received final approval.

Record the owner’s decision

1. As the owner recorded in the completed assessment, open the third party’s Assessments history and select the assessment awaiting your decision.
2. Review the assessed context, evidence, residual-risk basis, and conclusion rationale.
3. Use the available approval action to accept the conclusion, or return it with a reason when it needs correction.
4. Check the saved owner decision separately from the completed assessment snapshot.
5. For an approved treatment conclusion, inspect its linked follow-up work item and assignee when one was requested.

Check the assessed context, evidence, and residual-risk basis before approving. Owner decisions are retained separately from the assessor's completed record.

Follow treatment work

The assessor can request a linked follow-up work item and choose its assignee, defaulting to the third-party owner. A requested treatment task is created only after owner approval. Inspect the assessment's linked work items and their status to see implementation progress.

Approving a plan does not establish that treatment has been completed. Return to the third-party record and assessment history when circumstances change or another review is due.

Expected outcome

The recorded owner decision appears alongside the completed assessment. A return requires a new assessment; it does not rewrite the old snapshot. A requested treatment task is created after approval, but approving it does not confirm the treatment is complete.