
Access controls
Test staff and customer roles using realistic records. Sensitive information should not appear merely because a screen is hidden in navigation. Agree what the team receives if the supplier relationship ends.
Use task-based checks for the release and agree responsibility for later operating-system changes. Maintenance belongs in the project budget. Record the decision as well as the numbers behind it.
- A written brief
- Named responsibilities
- Agreed review points




