
Access controls
Test staff and customer roles using realistic records. Sensitive information should not appear merely because a screen is hidden in navigation. Agree what the team receives if the supplier relationship ends.
Use task-based checks for the release and agree responsibility for later operating-system changes. Maintenance belongs in the project budget. Leave the team with a decision, an owner, and a review date.
- A written brief
- Named responsibilities
- Agreed review points




