Role structure
Every Worker sits in a Role on a Team, and every Role publishes its responsibilities, Permissions and accountable lead.
Satisfies
| Criterion | Text |
|---|---|
| SOC2 CC1.3 | Management establishes, with board oversight, structures, reporting lines, authorities and responsibilities in pursuit of objectives. |
| SOC2 CC2.2 | The entity communicates internally the objectives and responsibilities for internal control that support its functioning. |
| ISO27001 A.5.2 | Information security roles and responsibilities are defined and allocated. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Preventive: it stops the failure before it happens. |
| Select | Every Worker active in the report period. |
| Assert | Each holds a seat in a Role with a published definition, a Team and an accountable lead. |
Owner
Example
A new Prospector Agent joins a court-filings API's Sales Team. Its seat links to the Role's published responsibilities, Permissions and the Sales Lead as accountable lead.