Maker-Checker Walkthrough
Who can initiate, amend, and release a high-value instruction in the same login—and whether the application actually stops that combination.
8–12 business days · from MYR 18,500 · informational
Starting from role catalogues and a sample of staff and privileged customer accounts, we test whether initiate, amend, approve, and release rights can sit on one person. You receive a conflict list with named accounts, the override path if one exists, and a keep-or-split recommendation your access team can action before the next sitting.
What is included
- Role and permission inventory for transfer, payee, and limit modules
- Conflict matrix for initiate, amend, approve, and release
- Named account exceptions with compensating controls noted
- Handoff sheet for access administration
