Organization

Admin records each organization with its code, time zone and currency. Business units carry their own code, contact and eligibility note and point back to that organization. A Team Member links a named person to a user account and organization. Assessment Owner chooses the organization and business unit for an assessment, so the team can identify the actual party under review.

Organizations establish the workspace context. Business units make risks and assessment counterparties specific. Team members make ownership visible to reviewers who need to distinguish a preparer from a decision maker.

• Ownership. The named person on a record is responsible for its next operational step.
• Working state. The recorded state tells colleagues whether preparation, review or follow-up is due.
• Evidence trail. Related records remain attached to the assessment or control that explains them.

Before work begins, decide how organizations and business units are named and when they become inactive. Check that every owner belongs to the right organization. The time zone on the organization and team member records should match how the team will interpret dated decisions. If someone changes teams, review their open assignments before changing membership.

In the pilot, choose a real operating period and a small set of named people. Check their membership and duties before entering historical material. Review who may see Internal evidence and who makes the independent decision. Agree how corrections are explained so the next reviewer can follow the record without relying on a private conversation.

For a client delivery unit, Admin records the organization and unit, including the contact who can answer scope questions. Admin links the Assessment Owner to a user account and the correct organization. The owner scopes a quarterly access review against that unit. If membership is wrong, planning must refuse the owner and leave the assessment unchanged. Rehearse an inactive unit as well, so the team knows which records are still suitable for new work.

Have the receiving role open the record rather than relying on a summary sent outside the app. Check the selected organization, owner, dates and links to related work. If the case is returned, record a reason and leave the next action visible. This rehearsal should expose unclear authority before the team uses the same pattern across more engagements.

• My Assessments — See assessment periods and revisions assigned to the current owner.
• Risk Register — Check which business units and named people own the related risks.

Follow the related process and use roles to check the handoff between people.