Quarterly access review

1. Read the customer list and the consent records.
2. Find records with no consent or an expired one.
3. Report the gaps by source.

Needs from you: Customer list; Consent records.

What it needs connected: Customer records, read only.

Where a person is designed to decide: It is designed only to read and report, so it has no approval step.

These approval steps describe how an entry is designed. Whether a deployment enforces them depends on how it is set up with you, and no run has been measured yet.

India: DPDP.

1. Read the policy register.
2. Find policies due within 30 days.
3. Send the list to the policy owners.

Needs from you: Policy register.

What it needs connected: Workspace approvals.

Where a person is designed to decide: It is designed only to read and report, so it has no approval step.

These approval steps describe how an entry is designed. Whether a deployment enforces them depends on how it is set up with you, and no run has been measured yet.

1. Read the auditor's request list.
2. Find each document in your records.
3. Put them in one folder with a source note.
4. A person checks the folder.

Needs from you: Request list; Records.

What it needs connected: Workspace activity log.

Where a person is designed to decide: A person checks the folder.

These approval steps describe how an entry is designed. Whether a deployment enforces them depends on how it is set up with you, and no run has been measured yet.