Payroll Processing Platform

Security Authorisation Assessment

SA
Authorise

Authorisation Gate

Final assurance review and accountable authorisation of system operation. VERIDION assembles the assurance chain, identifies unresolved conditions and recommends an authorisation position. Only the accountable Authorising Officer can authorise system operation.

Authorisation Readiness

NOT READY

3 unresolved blocking conditions

Authorisation readiness
NOT READY
Assurance confidence
91%
Residual risk
MEDIUM
Blocking items
3
Open human decisions
7
Authorisation package
63% complete
VERIDION Recommendation

DO NOT AUTHORISE YET

Mandatory assurance prerequisites remain unresolved. VERIDION recommends resolving the identified blockers before the system is presented for final authorisation.

VERIDION analyses assurance and recommends a position. It does not authorise the system.

Assurance Chain
System understanding → accountable authority

Authorisation cannot become ready while mandatory predecessor gates remain unresolved. Each stage depends on the integrity of the stage above it.

  1. System Understanding

    100%

    Complete
  2. Control Applicability

    100%

    Complete
  3. Evidence

    92%

    Attention required
  4. Control Assessment

    88%

    Attention required
  5. Risk Assessment

    84%

    Attention required
  6. Human Decisions

    7 outstanding

    Blocked
  7. Delegated Authority

    Authorising Officer

    Verified
  8. Authorisation Package

    63%

    Incomplete
  9. Authorisation

    Not ready

    Not Ready
Final Authorisation Decision
Accountable human decision

This decision permits or denies operation of the system within the defined authorisation boundary. Pressing an option is an accountable, auditable act — not a routine approval.

Authorisation unavailable

3 mandatory assurance prerequisites must be resolved before authorisation can proceed.

View blocking decisions

VERIDION enforces the configured governance workflow — it holds the authorisation while mandatory prerequisites remain unresolved. It does not itself hold authorisation authority.

Traceability
Every decision is traceable

The authorisation decision is bound to the assurance state that supported it — traceable end to end through the VERIDION model.

  1. System

    Payroll Processing Platform

  2. System Model

    Digital Twin v1.4

  3. Controls

    74 applicable · 73 assessed

  4. Evidence

    126 artefacts · EVS-001 baseline

  5. Assessments

    Security Assessment Report

  6. Risks

    TP-017 decided · 3 accepted

  7. Human Decisions

    DEC-024 · DEC-026 · DEC-027

  8. Delegated Authority

    DEL-001 · GOV-AUTH-2026-02

  9. Authorisation

    AUTH-001 · accountable decision

AI builds the assurance case. Humans exercise accountable authority.

Authorisation is not a document. It is an accountable decision supported by a traceable assurance state — bound to the system model, evidence, assessments, risks and delegated authority upon which it was made.

Accountable Authority
Verified in DELEGATE
SM

Sarah Mitchell

Authorising Officer

VERIFIED
AuthoritySystem Security Authorisation
ScopePROTECTED systems within Commonwealth Services Agency
DelegationDEL-001
ProvenanceGOV-AUTH-2026-02
Valid until30 June 2027

VERIDION verifies that the person attempting the authorisation possesses valid authority for this system and decision.

View Delegation
Authorisation Package
63% complete
  • System Security PlanComplete
  • Security Assessment ReportComplete
  • Statement of ApplicabilityComplete
  • Risk AssessmentComplete
  • Evidence RegisterComplete
  • POA&M2 unresolved items
  • Residual Risk AcceptancePending
  • Authorisation Decision RecordAwaiting Authorising Officer
  • Continuous Monitoring PlanComplete
Package completeness63%