The short answer
Export the complete change population for a fixed period, preserve before-and-after values and actor evidence, stratify by risk and change type, inspect all defined high-risk changes plus a documented random sample, and expand review when exceptions indicate a shared cause. Report coverage and exclusions explicitly.
Operational checklist
Mark your progress, then save a working copy. Selections reset when you leave this page. A checked box is not an approval or evidence of completion.
0 of 7 marked
Key takeaways
Build the change denominator
Include vendor creation, activation, deactivation, legal/display name, address, contact channel, payment destination, tax-document status, service category, approval status, insurance metadata, user access, and merges. Store sensitive source documents under approved access; use references in the sample sheet.
Reconcile the export count to system audit evidence or another approved source before selecting items.
Stratify before random selection
| Stratum | Coverage approach | Evidence focus | Expansion trigger |
|---|---|---|---|
| Payment destination or vendor merge | Review all or named high-risk policy | Independent verification and duplicate identity | Any unsupported change |
| New/activated vendor | Risk plus random sample | Authority, service need, duplicate search | Shared creator or source defect |
| Contact/address | Random plus outliers | Source and downstream update | Unexplained bulk pattern |
| Access/status | All privileged plus sample ordinary | Effective removal/addition | Surviving unauthorized path |
Report what the sample can and cannot establish
Record population, period, query, exclusions, strata, randomization method, sample size, reviewed fields, exceptions, root-cause hypothesis, expansion, correction owner, and residual limitation.
A clean sample supports the tested population and method; it does not certify every vendor record.
Close with sample coverage, exceptions, and expansion decisions
Name the reviewed population, cutoff, evidence version, decision owner, unresolved exceptions, next checkpoint, and downstream records updated. Preserve the superseded state; a clean current screen is not a substitute for the correction or exception history.
Reopen the record if the population, authority, source version, external outcome, or dependent report changes after sign-off.
Edge cases
Sources and references
Follow each source to check the underlying claim. Access checks and professional review are different steps.