Action accountability
Every Action records who acted, for whom and under which Mandate, so each result traces to an accountable Role.
Satisfies
| Criterion | Text |
|---|---|
| SOC2 CC1.5 | The entity holds individuals accountable for their internal control responsibilities in pursuit of objectives. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Preventive: it stops the failure before it happens. |
| Select | Every Action in the report period. |
| Assert | Each records a by, a for and a Mandate or Role seat that resolves to an accountable Role. |
Owner
Example
A bookkeeping service's Agent sends a reminder email for its founder under a delegated-sending Mandate. The Action records the Agent as by, the founder as for, and the Mandate, so the reply traces back to the Founder Role.