What mechanisms do we need to put in place to ensure that the Assessment Force has

1. synthetic historical background information
2. last assessment findings and recommendations/actions
3. incident information since the last assessment
4. list of unresolved issues

Who is to decide the focus of the assessment?

How do we have to organise to ensure execution with correct focus and complete scope within agreed timeframes?

Do we want to work with separate identification, assessment and actioning steps?

Do we have the means to check/test whether interview/meeting input is factual?

Is the Assesment Force in charge of follow through till final resolution or is this chased at centralised Audit/Risk Mgmt Unit level?

How do we ensure that suggested actions/recommendations are adequate to address findings?

How do we ensure that actions/recommendations are satisfactorily completed?

What escalation channels need to be installed to ensure that non-reacting assessed parties act upon recomendations?

How do we handle situations where recommendations are to be acted upon by other parties? (other than the one being assessed)