Payroll Processing Platform

Security Authorisation Assessment

SA
Delegate · DEL-009

Acting Risk Owner — Payroll Processing Platform

Emergency Delegated Authority — Residual Risk Acceptance (Acting). Authority derived from organisational governance, not technical access.

EXPIRINGEmergency

Decisions requiring this authority after expiry must be reassigned or escalated.

Authority Holder
DW

Daniel Woods

Acting Risk Owner

Fictional demonstration data

Authority type

Emergency Delegated Authority

Primary decision right

Residual Risk Acceptance (Acting)

System scope

Payroll Processing Platform

Maximum risk

MEDIUM

Classification

Up to PROTECTED

Valid until

15 September 2026

Authority Source
Delegation instrument

Emergency Risk Authority Delegation Instrument

Instrument

GOV-RISK-2026-07

Delegated by

Chief Risk Officer

Effective

1 August 2026

Expiry

15 September 2026

Decision Rights

Residual Risk Acceptance (Acting)

Allowed · Yes
Maximum residual risk

MEDIUM

System scope

Payroll Processing Platform

Information classification

Up to PROTECTED

Decision types
Security RiskCyber Risk
Constraints
  • Time-bounded — expires 15 September 2026.
  • Cannot accept HIGH or CRITICAL residual risk.
  • Decisions after expiry must be reassigned or escalated.
Authority Provenance

GOV-RISK-2026-07

Emergency Risk Authority Delegation Instrument

Documented authority
Source type

Governance document

Authority

Chief Risk Officer

Effective

1 August 2026

Expiry

15 September 2026

Evidence

1 supporting artefact

Confidence

HIGH

Documented

Governance instrument of record.

Configured

Set in a system, pending governance backing.

Inferred

Suggested by observation only.

VERIDION never treats inferred authority as sufficient for accountable risk acceptance or system authorisation. Authority must trace to a documented governance instrument.

Authority Chain
  1. Chief Risk Officer

    Accountable source authority

  2. Acting Risk Owner

    Time-bounded — Daniel Woods

  3. Expires 15 September 2026

Escalation Path
MEDIUM or below (until expiry)Acting Risk Owner
After expiryReassign or escalate to Authorising Officer

DECIDE performs the human decision workflow. DELEGATE establishes whether that human possesses the authority to make it.