Everything the platform does, and where the boundaries are

Example workflow

A committee meets on schedule with a published agenda. Attendance is recorded, decisions are logged against the issues they resolve, and action items are assigned with due dates and tracked to closure in the action tracker.

Example workflow

A policy is drafted inside a policy project, routed to reviewers, approved, then published to the library. An attestation campaign is issued to the relevant population and per-user acknowledgement records accumulate as compliance evidence.

Example workflow

A framework is adopted from the catalog. Clauses become obligations with named owners and review cadence. Owners attach evidence and record control test results. Gaps are raised as non-conformities with corrective actions, and the compliance calendar drives the next review.

Example workflow

Requirements are normalised from adopted frameworks into a single catalog. In the mapping workbench a canonical control is mapped to the requirements it satisfies, with the mapping snapshot retained for audit. The coverage matrix then shows mapped and unmapped requirements per framework.

Example workflow

A risk is reported through the intake queue and triaged by the risk function. It is scored against the configured matrix, assigned to an owner, and given a treatment plan with controls and evidence. Risks breaching appetite escalate for formal acceptance, recorded in the risk acceptance register.

Example workflow

A vendor is added to the inventory and profiled. A due-diligence questionnaire is issued and assessed, contracts and obligations are recorded, and any vendor incident is logged against the vendor and linked to the affected records.

Example workflow

Assets are registered with ownership and classification and routed through the review queue. When an incident occurs it is logged against the affected assets, investigated, and recurring causes are captured in the known-error database.

Example workflow

A BIA is completed for a business process, establishing impact over time and recovery objectives. A BCP is built to meet them and approved. Tests are scheduled and results recorded; after a real disruption a post-disruption review captures what the plan missed.

Example workflow

Auditable entities are maintained in the audit universe and a risk-based plan is approved. Fieldwork is executed against checklists with evidence captured per item. Findings are raised with corrective actions and owners, tracked until closed and verified.

Example workflow

A campaign is created with scope and reviewers. Each reviewer receives items with the access snapshot as it stood at review time. Decisions are recorded, remediation such as role removal or account disable is actioned, and reminders and escalation chase incomplete reviews.

Example workflow

An enrollment rule assigns a learning path to a learner group. A training campaign drives completion with reminders and escalation. Quiz results and certificates are retained as evidence, and phishing campaigns test whether awareness translated into behaviour.

Example workflow

Users land on a workspace showing their assigned tasks, reviews and overdue items. Function heads work from discipline dashboards, and KPI/KRI monitoring surfaces indicators breaching threshold for the governance forum.

Example workflow

Roles are defined and given action-level rights per module through the permission matrix. Users are assigned one or more roles, and effective permission is the union of those roles constrained by data scope — all / department / assigned / own.