CS-SEC-004 · SEC Security, privacy, sovereignty and evidence custody · 150 of 192
Minimize, redact or tokenize sensitive fields
Data Steward · Trigger: An authorized consumer needs only part of a payload.
Simulated fixture data. Every record, receipt and timeline entry on this screen is demonstration material. It is never production evidence.
Acceptance
2 of 3 steps satisfiedA consumer payload will contain only approved fields and expose the applicable transformation evidence.
Run the remaining steps below. The result is read back from record state — nothing here is a toast.
Normal path
Access is reviewed, excess access is revoked and the credential path is rotated.
Step 1. Complete the periodic access review.
not yet satisfiedOperates onACCE-020D. Fernandes (Release Manager) → HAL OT controller E11Access record· NORTHBRIDGE-ALLOY / Sheffield Bar Mill
stateexpiredreviewreviewretentionarchived
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: review = accepted
Step 2. Revoke access that is no longer justified; record the offboarding receipt.
satisfiedOperates onACCE-027S. Iyer (Operations Lead) → RGH Relational database A25Access record· OPTIMON-IND / Halol Packaging Line
staterevokedreviewacceptedretentioncurrent
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: state = revoked
Step 3. Rotate the credential reference exposed by that access.
satisfiedOperates onCONN-006NGD File drop F6 — least-privilege connectionConnection· OPTIMON-IND / Nagda Warehouse
reachabilityreachablecredentialcurrentcontainmentstable
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: credential = current
Exception path
Redaction will not be treated as reversible unless separately authorized token services permit it.
Alternate path. An investigation is open: apply a legal hold instead of deleting anything.
not yet satisfiedOperates onACCE-020D. Fernandes (Release Manager) → HAL OT controller E11Access record· NORTHBRIDGE-ALLOY / Sheffield Bar Mill
stateexpiredreviewreviewretentionarchived
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: retention = held
Workflow as specified
CoreSync will apply versioned field-level minimization and controlled tokenization or redaction while retaining the disposition required for audit and reconciliation.
Evidence written in this session
Nothing run yet in this session. Record state shown above may already satisfy steps from the seeded fixture history.