Payroll Processing Platform

Security Authorisation Assessment

SA
Human Decision Queue
DEC-028AuthorisationCRITICALBLOCKED

Payroll Processing Platform Security Authorisation

System authorisation cannot complete while mandatory prerequisites remain unresolved.

Authorising Officer3 dependent objectsTarget authorisation in 12 days
Authorisation Decision

Is sufficient security assurance available to authorise this system to operate?

VERIDION evaluates the assurance chain and identifies unresolved dependencies. The Authorising Officer remains accountable for the authorisation decision.

Open Authorisation Gate
Authorisation Readiness

NOT READY

3 Blocking Conditions

Authorisation readiness reflects the current state of the System Security Digital Twin and its supporting assurance evidence.

Assurance Chain
Dependency-ordered
  1. 1
    System ModelATTENTION REQUIRED

    1 unresolved authoritative-state conflict

  2. 2
    EvidencePARTIAL

    1 mandatory control assessment awaiting evidence

  3. 3
    Control AssessmentINCOMPLETE

    Internet-facing service controls require reassessment

  4. 4
    Threat & RiskUNRESOLVED

    TP-017 residual risk requires reassessment following exposure change

  5. 5
    Human DecisionsPENDING

    3 prerequisite decisions remain unresolved

  6. 6
    Decision AuthorityVALID

    Authorising Officer authority verified (DELEGATE)

  7. 7
    AuthorisationBLOCKED

    Authorisation workflow held while prerequisites are unresolved

Blocking Conditions
3 unresolved
  • Blocker 01DEC-024HIGHSystem Model Conflict

    API Endpoint Exposure

    Observed Azure configuration indicates Azure API Management is Internet Accessible while architecture documentation states Private.

    Effect on authorisation

    The authoritative exposure state of an externally reachable component has not been established.

    Required action: Security Architect must resolve the authoritative system state.

    Review DEC-024
  • Blocker 02DEC-025MEDIUMControl Reassessment

    Internet-facing service protection

    The API exposure change invalidates assumptions used by the previous control assessment.

    Effect on authorisation

    Control effectiveness for the affected Internet-facing service cannot currently be relied upon.

    Required action: Security Assessor must reassess affected controls after DEC-024 is resolved.

    Review DEC-025
  • Blocker 03DEC-026MEDIUMResidual Risk

    External API compromise leading to PROTECTED payroll data disclosure

    Residual risk TP-017 depends upon the unresolved exposure state and affected control conclusions.

    Effect on authorisation

    Residual risk acceptance cannot be treated as final until the upstream assurance chain is stable.

    Required action: Risk Owner must reassess and accept, treat or escalate the residual risk after upstream dependencies are resolved.

    Review DEC-026
Required Resolution Order
Causal dependency
  1. 1DEC-024Resolve authoritative system state
  2. 2DEC-025Reassess affected controls
  3. 3TP-017Recalculate threat path / residual risk
  4. 4DEC-026Risk Owner decision
  5. 5DEC-028Authorisation decision

Downstream assurance conclusions remain provisional while upstream authoritative-state dependencies are unresolved.

VERIDION Analysis
Machine reasoning
RecommendationDO NOT AUTHORISE YETConfidence: HIGH

The current assurance chain contains an unresolved authoritative-state conflict affecting an Internet-facing API. This conflict invalidates dependent control conclusions and the current TP-017 residual-risk assessment. Resolve DEC-024, reassess the affected controls, recalculate TP-017 and obtain the required Risk Owner decision before system authorisation.

Recommendation only. VERIDION does not issue system authorisation.

Human Decision Required

AUTHORISATION BLOCKED

VERIDION prevents completion of the authorisation workflow while mandatory assurance prerequisites remain unresolved. VERIDION enforces the configured governance workflow; it holds no legal or organisational authority of its own.

View Blockers

“Authorisation is not a document. It is an accountable decision supported by a traceable assurance state.”

VERIDION maintains the chain between system reality, assurance evidence and accountable human authority.

Authorisation Authority
VERIFIEDWITHIN AUTHORITY
Role
Authorising Officer
Decision right
System Security Authorisation
System scope
Payroll Processing Platform
Classification
Up to PROTECTED
Authority provenance
GOV-AUTH-2026-02
View Authority
Assurance Coverage
Controls
Applicable controls
74
Assessed
73
Effective
68
Partially effective
3
Ineffective
2
Awaiting evidence
1
Risk
Open risks
4
Accepted residual risks
3
Pending residual-risk decisions
1
Exceptions & Evidence
Open exceptions
2
Expired exceptions
0
Evidence artefacts
126
Stale evidence
3

Coverage metrics inform assurance. They do not determine authorisation.

Material Risks
For Authorising Officer
  • TP-017MEDIUMREASSESSMENT REQUIRED

    External API compromise → PROTECTED payroll data

    DEC-026
  • TP-009LOWACCEPTED

    Privileged credential compromise

    Accepted by Risk OwnerDEL-004
  • TP-012LOWACCEPTED

    Payroll integration service outage

    Accepted by Risk OwnerDEL-004
Active Security Exceptions
  • DEC-027APPROVED EXCEPTION

    Emergency Administrator Accounts — MFA Exclusion

    Owner: System OwnerExpires in 30 days2 compensating controls

    Not currently blocking authorisation

    Exception remains within approved scope, validity and delegated authority.

    View exception
What Changed Since Last Review

Today 10:24

Azure API Management exposure observed as Internet Accessible.

  • DEC-024 created
  • DEC-025 reassessment triggered
  • TP-017 recalculation required
  • DEC-026 flagged for reassessment
READY WITH CONDITIONSNOT READY

VERIDION continuously invalidates prior assurance conclusions when system reality changes.

Authorisation Drift
Continuous assurance

After authorisation, VERIDION continuously evaluates whether material changes invalidate the assumptions underlying the authorisation. It does not automatically revoke authorisation.

Architecture exposure changeNew critical vulnerabilityControl degradationExpired exceptionExpired delegationMaterial threat-path changeEvidence becoming staleInformation classification change

Flags: Authorisation Reassessment Required

The appropriate decisions are then routed through DECIDE — establishing continuous authorisation assurance.

Decision History
Immutable record
  1. 6 days agoAuthorisation package opened
  2. 10:24Prerequisite chain updated after exposure change