Payroll Processing Platform

Security Authorisation Assessment

SA
Delegate · DEL-002

Security Assessor — Payroll Processing Platform

Assessment Authority — Control Effectiveness Determination. Authority derived from organisational governance, not technical access.

ACTIVE
All authorities
Authority Holder
MR

Marcus Reed

Security Assessor

Fictional demonstration data

Authority type

Assessment Authority

Primary decision right

Control Effectiveness Determination

System scope

Payroll Processing Platform

Classification

Up to PROTECTED

Valid until

30 June 2027

Authority Source
Delegation instrument

Security Assessment Delegation Instrument

Instrument

GOV-ASSESS-2026-01

Delegated by

Chief Information Security Officer

Effective

1 July 2026

Expiry

30 June 2027

Decision Rights

Control Effectiveness Determination

Allowed · Yes
System scope

Payroll Processing Platform

Information classification

Up to PROTECTED

Decision types
Control Effectiveness
Constraints
  • Must be independent of control implementation.
  • Cannot accept residual risk.
  • Cannot issue system authorisation.
Authority Provenance

GOV-ASSESS-2026-01

Security Assessment Delegation Instrument

Documented authority
Source type

Governance document

Authority

Chief Information Security Officer

Effective

1 July 2026

Expiry

30 June 2027

Evidence

1 supporting artefact

Confidence

HIGH

Documented

Governance instrument of record.

Configured

Set in a system, pending governance backing.

Inferred

Suggested by observation only.

VERIDION never treats inferred authority as sufficient for accountable risk acceptance or system authorisation. Authority must trace to a documented governance instrument.

Authority Chain

  1. Chief Information Security Officer

    Accountable source authority

  2. Security Assessor

    Delegated holder — Marcus Reed

  3. Effectiveness determination within scope

Escalation Path
Control effectivenessSecurity Assessor
Residual risk acceptanceRisk Owner
System authorisationAuthorising Officer

DECIDE performs the human decision workflow. DELEGATE establishes whether that human possesses the authority to make it.