
Access controls
Test staff and customer roles using realistic records. Sensitive information should not appear merely because a screen is hidden in navigation. Make sure the business can retrieve its own data.
Use task-based checks for the release and agree responsibility for later operating-system changes. Maintenance belongs in the project budget. Identify the most useful correction before adding another feature.
- A written brief
- Named responsibilities
- Agreed review points




