Homework — Lesson 06
Two tasks · ~30 minutes · Applied to your own organisation
Task 1 — Map access and separation-of-duties gaps
Choose one sensitive process you own. List who can perform each step, and mark any step a single person can both initiate and approve. Identify one place to introduce separation of duties or dual control.
✓ Self-check: you can name at least one single-person path to a high-impact action and a specific two-person control that would close it.
Task 2 — Find the movers
Pick one long-tenured team member (or yourself). List accesses accumulated from previous roles that are no longer needed. Decide which to remove and who owns the change.
✓ Self-check: you have a concrete list of entitlements to revoke, with an owner and a date.
Task 3 (optional) — Say the reporting sentence
Draft two sentences you could say to your team that would make someone who has been externally approached feel safe reporting it to you rather than hiding it.
✓ Self-check: your wording rewards coming forward and removes fear of automatic suspicion.