# Role structure

URL: /systems/trust-and-governance/controls/role-structure · Id: `control:role-structure`

> Every Worker sits in a Role on a Team, and every Role publishes its responsibilities, Permissions and accountable lead.

Every [Worker](/business/nouns/worker) sits in a [Role](/business/nouns/role) on a [Team](/business/nouns/team), and every Role publishes its responsibilities, [Permissions](/business/nouns/permission) and accountable lead.

## Satisfies
| Criterion | Text |
| --- | --- |
| [SOC2 CC1.3](/systems/trust-and-governance/criteria/soc2/cc1-3) | Management establishes, with board oversight, structures, reporting lines, authorities and responsibilities in pursuit of objectives. |
| [SOC2 CC2.2](/systems/trust-and-governance/criteria/soc2/cc2-2) | The entity communicates internally the objectives and responsibilities for internal control that support its functioning. |
| [ISO27001 A.5.2](/systems/trust-and-governance/criteria/iso27001/a-5-2) | Information security roles and responsibilities are defined and allocated. |

## Implemented by
- [Staffing](/workflows/processes/staffing)
- [Staff roles](/workflows/processes/staffing/staff-roles)
- [Workforce](/systems/workforce)

## Test
| Step | Rule |
| --- | --- |
| Kind | Preventive: it stops the failure before it happens. |
| Select | Every Worker active in the report period. |
| Assert | Each holds a seat in a Role with a published definition, a Team and an accountable lead. |

## Owner
[People Lead](/agents/people/people-lead), [People Team](/agents/people).

## Example
A new [Prospector](/agents/sales/prospector) [Agent](/business/nouns/agent) joins a court-filings API's [Sales](/agents/sales) Team. Its seat links to the Role's published responsibilities, Permissions and the [Sales Lead](/agents/sales/sales-lead) as accountable lead.