Field notes · 26 November 2025
Board packs that support an assurance memorandum
Which minutes, attestations, and exception reports an independent reviewer expects to see before signing findings.
An assurance memorandum is only as strong as the governance trail behind it. When Bridgepoint issues findings, we expect to cite board packs that show the firm knew — or should have known — about control exceptions before our fieldwork began.
Minutes that help
Useful minutes record the exception, the owner, the deadline, and whether the item was closed or carried. Minutes that only say “compliance update noted” force reviewers to reconstruct history from email. That reconstruction rarely flatters anyone.
Attestations and exception reports
Management attestations should align with the period under review. If a safeguarding attestation claims daily tie-outs while the exception report shows multi-day breaks, the contradiction becomes a finding of its own. Bring both documents to the closing workshop; do not hope the reviewer will miss one.
What we ask for early
Our evidence request for a regulatory controls audit includes recent board packs, the breach or exception register, and the last two management attestations on client money. Providing them early shortens fieldwork and reduces last-week surprises for the board.