Glossary

Role governance

The assignment of permissions and accountabilities by institutional function rather than by individual, so the solution does not depend on specific people.

The assignment of permissions and accountabilities by institutional function rather than by individual, so the solution does not depend on specific people. It prevents all-powerful users and sustains governance through staff turnover.

Assigning permissions by function rather than by person is what keeps a staff change from breaking the process or forcing security to be redone. It is also the condition for segregation of duties to hold over time.

Related terms

Data owner

The role accountable for the definition, quality, use, integrity, security, lineage and evolution of a critical entity.

Deny by default

An authorization posture where nothing is permitted unless explicitly granted — what is not conceded is neither shown nor executed.

Organizational adoption

The extent to which people actually use the designed process, capture data with quality and use indicators to decide.

Process owner

The single role accountable for a process's objective, design, performance, approval, changes and improvement.

Role-based training

An approach organizing training around each person's operational accountability rather than by generic tool functionality.

Segregation of duties

A control preventing one person from accumulating incompatible permissions, such as requesting and approving.