Payroll Processing Platform

Security Authorisation Assessment

SA
Human Decision Queue
DEC-022Control AssessmentLOWAWAITING EVIDENCE

Backup restoration testing evidence

Control effectiveness determination is pending restoration-test evidence for the payroll database.

Security Assessor1 dependent objectsDue in 8 days
Question

Is the backup restoration control effective?

VERIDION Analysis
Machine reasoning

A successful restoration test artefact is required before effectiveness can be concluded. The most recent test evidence is outstanding.

Evidence Considered
  • Restoration test log

    Awaiting latest quarterly test

    Supporting
    Source
    Backup service
    Timestamp
    Requested 2 days ago
    Method
    Automated collector
Human Decision Required

Requires Control Effectiveness authority (Security Assessor). Acting as Security Assessor in this demonstration.

Decision Authority
  • Security Architect

    May validate system-model assertions and architecture conflicts.

  • Security AssessorRequired

    May determine control effectiveness.

  • System Owner

    May approve treatments and operational exceptions within delegated authority.

  • Risk Owner

    May accept residual risk within delegated authority.

  • Authorising Officer

    May authorise system operation.

Authority is not transferable by discovery. A Security Architect cannot accept residual organisational risk merely because they identified it, and a Security Assessor cannot issue system authorisation.

Decision History
Immutable record
  1. 2 days agoAssigned to Security Assessor