Worksheet

Access-risk-control matrix

A table with roles down the side and data types or actions across the top: customer records, ledger entries, refunds, exports and admin settings. Each cell reads none, view or full. Use it to design permissions before launch, then keep it as the baseline that every quarterly access review is checked against, so drift shows up quickly.

Name: ______________________   Business: ______________________   Date: ______________

Scroll the table sideways to see every column.

Cross out or rewrite any heading that does not fit your business. From the guide “How Role-Based Access Protects Business Data”, www.gullysystem.com/blog/how-role-based-access-protects-business-data