Working across roles
One person can hold several VeriProof roles. A small team can cover all six.
Work as one role at a time
You work in one role at a time. Pick it under Work as in the user menu, and Home, Inbox, and what you’re allowed to do change with it. When a link leads to work for another of your roles, it offers to switch for you.
How your roles hand off
When you hold both ends of a handoff, the work still moves between roles:
- A rule you write as Governance Engineer may need a field the application doesn’t send. The fix request lands with you as Developer.
- You change a production rule as Governance Engineer and can approve it as Administrator or Compliance Officer, unless your organization requires approvers other than the author.
- As Compliance Officer you assign the fix for a control that isn’t met. You might also be the one fixing it, as Developer or Governance Engineer.
- As Compliance Officer you can propose accepting a risk. As Business Owner you approve risk acceptances, but not ones you proposed.
- You set up an audit engagement as Administrator or Compliance Officer, then review the evidence inside it as Auditor.
- As Compliance Officer you choose who reviews escalated decisions. If that includes you, some reviews can’t be decided by the person who asked for them.
Decisions that need someone else
Some decisions need a second person, even when one person holds every role. VeriProof keeps the item open and says who can decide it. It never records a decision as approved by the same person twice.
| Decision | What it needs |
|---|---|
| Production promotion | A Developer or Governance Engineer asks for it, and a different Administrator approves it. |
| Risk acceptance | Whoever proposed accepting a risk can’t approve it. Another Business Owner has to. |
| Policy exception | The person who asked for an exception can’t decide it. |
| Rule approval | If your organization requires approvers besides the author, one person can’t fill those slots. |
| Reviews that need more than one reviewer | The review stays open until enough different people have decided. |
If you run VeriProof on your own
If you’re covering most roles yourself, this order takes you from an empty account to evidence you can check. Each step switches you to the role that does it.
- Administrator: Set up the organization and give yourself the roles you’ll cover.
- Developer: Connect an application and send a setup session.
- Governance Engineer: Write a rule, run it in Shadow, then enforce it.
- Compliance Officer: Pick the requirements that apply and look at the evidence.
- Business Owner: Check the value estimate and any decisions waiting on you.
- Auditor: Check the evidence in an internal engagement that you set up as Administrator.