Establish what the records collectively show
GapScan examines a defined assurance question across the agreed population. It maps the relevant systems, validates the available evidence and reconstructs traceable care journeys, giving leaders and auditors a defensible account of the evidence and its limits.
Built around the decision
The engagement begins with the assurance question, period, services and population that matter. That population may be a targeted cohort, a risk-based selection or the whole service.
The scope, responsibilities, access arrangements, deliverables and price are agreed in writing before any work starts.
- An evidence specification: what records the question needs.
- A map of your systems and where each kind of evidence is kept.
- Tested export instructions, including the permissions each one needs.
- A structured evidence package for the agreed population, where access allows.
- Identity, date, source and completeness checks on the evidence.
- Source-linked care journeys showing what is supported, unclear or unresolved.
- A clear account of evidence that could not be reached or read, and why.
- Findings and recommendations proportionate to the evidence available.
Five steps
Define the assurance scope
We agree the question, service, period, population, sources and the people responsible for approving access and accepting the work.
Map the systems
We record which products and modules you use, how they are set up locally, and what your subscription and permissions allow.
Acquire and validate the evidence
We test the approved routes, record what each source provides and verify identity, date, provenance and readability.
Reconstruct the care journeys
GapScan places the evidence in sequence, links each finding to its source and makes every open loop and limitation visible.
Report and recommend
You receive the findings, supporting evidence trail, stated limitations and a clear recommendation on what to do next.
Clear responsibilities
- GapScan establishes and organises the evidence; your auditor or accountable professional retains the final judgement.
- The engagement covers only the systems, records, population and period authorised in the written scope.
- Permanent connections, ongoing monitoring and further assurance work are scoped separately when required.
- No real records are processed until the contract, data-protection terms, named authority and secure transfer route are in place.
Discuss your evidence landscape
Describe the assurance question, the systems involved and the decision the work needs to support. Rowan will establish whether GapScan is a suitable method and what a responsible scope would require.