The field capabilities teams should evaluate
The detail matters, but it is easier to understand in four buckets: govern requirements, assess evidence, develop people, and prove status.
Govern
Taxonomies, framework versions, role profiles, competency items, risk presets, org defaults, and idempotent framework-pack import.
Assess
People scopes, evidence artifacts, evidence claims, verification attempts, assessment methods, assessor decisions, lifecycle logs, and audit events.
Develop
Training catalog, plans, plan items, completion evidence, optional CPD records, and iHasco training compliance sync where configured.
Prove
Tokenized verification links, credential IDs, integrity tokens, disclosure flags, expiry, revocation, public access logging, activity feeds, and read boundaries.