Auditing access changes around outside counsel invoice

Question and scope

This protocol asks how outside counsel invoice can be described from the operational record in legal support operations. It measures the record, not the person or the legal outcome. State the population, the observation window, and the exclusions before collecting data. The result should be repeatable by another reviewer using the same definitions. When evidence is unavailable, record that state instead of leaving a blank. Missing and confirmed negative are different. Write the next action with an owner and a time. "Review the exception" is not a next action; a named person checking a named source by a stated time is. Close the loop with the requester. Internal completeness without confirmation is only half closed. Name a backup owner for leave and time-zone gaps. Coverage should be written into the routine.

Unit and denominator

The unit is one outside counsel invoice case, from the opening event through the recorded close. Record the opening count, additions, withdrawals, resolutions, and unresolved items. A count without a denominator is not a measure. Do not merge linked events into one case unless the process defines them as one requirement. Use a short reason code for each exception. The code should describe the evidence problem, not the person. Keep the outside counsel invoice queue separate from the general inbox. A queue without an owner hides the oldest item. Record the outside counsel invoice source and observation time. A later reviewer should be able to tell whether the value was current when the first action was taken. Do not copy a value because it looks familiar. Reopen the source and record what changed.

Definitions

Write the start event, the stop event, the pause rule, and the treatment of missing evidence. Define the primary measure and one supporting measure. Use the same definitions for every case. If a definition changes, keep the earlier classification and apply the new rule only to later cases. Review one outside counsel invoice case end to end in the weekly meeting. Check the source, decision, destination record, and confirmation. When evidence is unavailable, record that state instead of leaving a blank. Missing and confirmed negative are different. Write the next action with an owner and a time. "Review the exception" is not a next action; a named person checking a named source by a stated time is. Close the loop with the requester. Internal completeness without confirmation is only half closed.

Evidence and data dictionary

Each case needs the source, the time observed, the field supported, and the reviewer. Mark missing, unavailable, and confirmed negative values separately. Use a pseudonymous key and keep the identity crosswalk in an approved system. Record the source version so a later reviewer can tell what was known at the first action. If the rule changes, keep the earlier classification and apply the new rule to later cases. Use a short reason code for each exception. The code should describe the evidence problem, not the person. Keep the outside counsel invoice queue separate from the general inbox. A queue without an owner hides the oldest item. Record the outside counsel invoice source and observation time. A later reviewer should be able to tell whether the value was current when the first action was taken.

Sampling

Use consecutive cases where possible and stratify by channel, owner, or risk class. Include adverse cases: missing source, conflicting instruction, unavailable owner, and a tight deadline. Record the eligible count, sample size, and every exclusion so the sample can be reproduced. Name a backup owner for leave and time-zone gaps. Coverage should be written into the routine. Review one outside counsel invoice case end to end in the weekly meeting. Check the source, decision, destination record, and confirmation. When evidence is unavailable, record that state instead of leaving a blank. Missing and confirmed negative are different. Write the next action with an owner and a time. "Review the exception" is not a next action; a named person checking a named source by a stated time is.

Analysis

Report the missing-field rate, the exception rate, the unresolved count, and the age of open cases. Separate observation from interpretation. A small easy sample is not evidence of a strong control. Keep case-level detail available for review. A summary chart without records cannot support a decision. Do not copy a value because it looks familiar. Reopen the source and record what changed. If the rule changes, keep the earlier classification and apply the new rule to later cases. Use a short reason code for each exception. The code should describe the evidence problem, not the person.

Limitations

The record may be incomplete or delayed. The method cannot infer missing work from a clean summary. Small samples are sensitive to one case; report the instability instead of a precise-looking percentage. Public sources frame recordkeeping and control practice but do not provide a result for this sample. Close the loop with the requester. Internal completeness without confirmation is only half closed. Name a backup owner for leave and time-zone gaps. Coverage should be written into the routine. Review one outside counsel invoice case end to end in the weekly meeting. Check the source, decision, destination record, and confirmation.

Review and next action

Name the owner who will read the result and set a review date. Choose one action: fix the source, simplify the field, change the queue, or pause the work until the owner decides. Repeat the protocol after the change and report what moved and what remains unknown. Record the outside counsel invoice source and observation time. A later reviewer should be able to tell whether the value was current when the first action was taken. Do not copy a value because it looks familiar. Reopen the source and record what changed. If the rule changes, keep the earlier classification and apply the new rule to later cases.

Related research

• Estimating rework cost in deadline calendar
• Testing handoff completeness in privilege log
• Measuring backlog age in document index