Functional testing of the channel

1. Regulatory Concept & Core Standards

This video's topic is functional testing of the channel. By the end, you should be able to test an authorised process with fictional data. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Audit assesses specified criteria and evidence within a limited scope. This recommended method confers no statutory certificate. Auditors also observe confidentiality and privacy. Match conclusions to period, sample and processes checked.

A functional test checks a specified journey, not all cybersecurity or certification. Include access, dialogue and permissions. Fictional information usually suffices for basic checks without creating real-person cases.

Apply the following rule: Section 7(2) requires acknowledgement and a preliminary recognition decision promptly and no later than seven days after receipt. Notify the decision within three days after making it. Provide progress information within two months after recognition as a whistleblower report and outcome information after examination. Private entities apply section 7 paragraphs 2,5,7 and 8; public-body exceptions must not automatically be imported.

2. Practical Implementation & Procedure

Define expected result and use an authorised environment. Test varied roles and blocked access. Record version, outcome and limits. Retest the same journey and possible side effects after correction. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A restricted user sees another case title. The defect is recorded, permissions corrected and the identical journey retested. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does successful submission prove the entire channel secure? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. It proves the checked function under those conditions. Other safeguards need separate checks.

One mistake to avoid is: presenting one test as full certification.

Now apply the national rule to a second decision. The platform counts 90 days from opening. Does this meet Latvian requirements?

No. Separately record receipt, recognition decision and notification. Acknowledgement and initial decision are due within seven days after receipt; notify the decision within three days after making it. Progress information is due within two months after recognition. Apply section 7(1)’s distinction between public and private organisations.