Foundations

Evidence that shows its work.

An assessment is only as useful as the trail behind it. Where QMSROOT puts something forward, it carries where that came from, what kind of authority it holds, and whether it is still current.

What you get

Authority is labelled, never assumed.

Guidance from a regulator is not legislation. A suggestion is not either.

Regulatory requirement

Binding law or regulation.

Authoritative guidance

Published by a regulator. Not itself binding.

Standard requirement

A requirement of a named standard.

Your own control

Something your organisation decided.

RootAí recommendation

A suggestion. Never an external obligation.

Illustrative example

Shown to explain, never to assert.

The last three cannot carry an external citation. That is structural.

Source to decision

  1. 01

    Source

    Who published it, and what kind of content it is.

  2. 02

    Authority

    Labelled by what backs it — six kinds, never merged.

  3. 03

    Currency

    Interpreted by source type. In force is a legal term.

  4. 04

    Decision

    Carried into the assessment, and into your record of it.

Evidence Library

The documents in your workspace, in one place.

What has been brought in or drafted, held together so an assessment can point at it. A draft is never presented as approved — approval stays with your authorised reviewers.