Looks reasonable to me. There is a lot of responsibility placed on the QAO for verifications and judgements (example 5.11). Will the QAO have sufficient "oomph" when dealing with line management who says - we told the person who screwed up to not do it again, we are done with this" or words to that effect?