For your role

    Risk and compliance

    Practical guidance for the decision, evidence and service this role owns.

    The question

    “Is quantum risk in our register, and can we evidence it to an examiner?”

    Record a defined boundary, accountable owner, evidence-backed pillar levels, gate outcomes, exceptions and treatment decisions under the active QCI-QS1 edition.

    Why it is urgent for this role

    A policy statement is not enough when an examiner asks which systems were in scope, how the score was determined, which suppliers responded and who accepted each exception.

    Start with one free document

    QCI-QS1 v2.3, Clause 4. No form.

    The service that fits

    Independent Assessment. A written determination for work QCI did not help build. QCI-built work must be assessed by an assessor outside QCI under the Independence policy.

    Sample deliverable

    Illustrative written determination showing the information structure a client would receive
    Written determination. Boundary, edition, findings, limitations and an independently assessed Q-Risk Score. This illustration shows the format only; it is not client evidence.

    Can QCI assess a readiness baseline it helped build?

    No. That boundary must be assessed by an assessor outside QCI. The firm-level rule and conflict process are published in the Independence policy.

    Book a scoping conversationTry the free screening