Functional testing of the channel

1. Regulatory Concept & Core Standards

This video's topic is functional testing of the channel. By the end, you should be able to test receipt, response and protective safeguards. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Audit compares criteria with evidence and reports findings within a defined scope. This course proposes an internal verification approach. It is not official certification or a guarantee that no wrongdoing exists. Access to reports must remain limited and justified during audit.

A published channel can fail in practice. Test submission, acknowledgement, follow-up, allocation and access. Also test prohibited outcomes such as unauthorised case access. Authorise tests and use fictional data, preferably in a test environment or clearly labelled to avoid confusion with genuine reports.

Apply the following rule: Under section 10(6), acknowledge receipt within seven days of receipt. Under section 10(8), examine the report and communicate the result and measures within 90 days of acknowledgement; if not acknowledged, within 90 days after expiry of seven days from receipt. These are 90 days, not three calendar months. Referral to criminal or other relevant proceedings has its own rules: advance information, except where this could jeopardise examination; requesting the outcome within the legally permitted scope; and informing the reporting person within ten days of receiving that outcome.

2. Practical Implementation & Procedure

Prepare identified and anonymous scenarios according to available methods. Define expected results. Test messages, configured deadlines, cover and conflicts. Check attachment and export permissions. Capture no real case data in evidence. Functional testing is not a full cybersecurity assessment of the product. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

Submission works, but the follow-up code cannot reopen messages. Testing finds a failure that checking the homepage alone would miss. The team records impact and requests correction and retesting of the affected journey. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Is checking that the form opens enough to establish that the channel works? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Test the complete journey and relevant safeguards. The homepage is one point. The report must identify tested routes and results.

One mistake to avoid is: submitting uncoordinated fictional cases that can be mistaken for genuine reports.

Now apply the national rule to a second decision. The platform counts three months from opening the message in every country. Is that correct?

No. Slovak internal receipt is acknowledged within seven days. Examination and communication of its result and measures are subject to the section 10(8) period of 90 days after acknowledgement, or expiry of seven days after receipt if unacknowledged. Opening is not the trigger and 90 days are not three months. Referral has a specific statutory procedure.