Risk Governance and Compliance Review Protocol
A reasoned decision, with a traceable record.
Version 1.1 · October 2026
Step 1
Define the decision and its basis
Step 2
Establish what the evidence supports
Step 3
Assign responsibility by risk domain
Step 4
Open an issue and choose the next step
Step 5
Request evidence and track follow-up
Step 6
Record the decision and its limits
Step 7
Contract governance questions
Covered-materials module
- Find the covered material
- Check exceptions and record the basis
- Trace each stage
- Match evidence to stage
- Screen ownership
- Decide and record
- Build the indentured evidence record
CMMS-BS assesses what public sourcing disclosures establish. It is not a certification, an audit or legal advice.