Role guides

Choose the guide for your assigned role. It explains the evidence to review and the actions available within that role’s scope. If you hold more than one role, follow the guidance for the task you are performing.

Manage organization access, applications, and operating controls.

Administrator

Connect applications and verify captured evidence.

Developer

Define policy behavior and review exceptions and remediation.

Governance Engineer

Review regulatory scope, controls, evidence, and authorized decisions.

Compliance Officer

Review business impact, cost, outcomes, ownership, and assigned decisions.

Business Owner

Review scoped evidence through read-only access.

Auditor

Your organization may add procedures specific to its applications, agreements, and regulatory duties.