CS-SEC-008 · SEC Security, privacy, sovereignty and evidence custody · 154 of 192
Provide time-bounded support access
Support Lead · Trigger: An incident requires access to sensitive integration evidence.
Simulated fixture data. Every record, receipt and timeline entry on this screen is demonstration material. It is never production evidence.
Acceptance
3 of 3 steps satisfiedAccess will expire automatically and all inspected evidence will remain attributable to the support session.
Every step's expected record state is present. This is read back from the records, not asserted by the screen.
Normal path
Access is reviewed, excess access is revoked and the credential path is rotated.
Step 1. Complete the periodic access review.
satisfiedOperates onACCE-024J. Okonkwo (Quality Data Steward) → HAL Mobile capture A19Access record· NORTHBRIDGE-ALLOY / Sheffield Bar Mill
stateexpiredreviewacceptedretentionarchived
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: review = accepted
Step 2. Revoke access that is no longer justified; record the offboarding receipt.
satisfiedOperates onACCE-003S. Iyer (Operations Lead) → RGH Relational database E5Access record· OPTIMON-IND / Halol Packaging Line
staterevokedreviewacceptedretentioncurrent
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: state = revoked
Step 3. Rotate the credential reference exposed by that access.
satisfiedOperates onCONN-010NGD Partner SaaS D10 — least-privilege connectionConnection· OPTIMON-IND / Nagda Warehouse
reachabilityreachablecredentialcurrentcontainmentstable
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: credential = current
Exception path
Support diagnostics will not create unrestricted data exports or permanent elevated credentials.
Alternate path. An investigation is open: apply a legal hold instead of deleting anything.
not yet satisfiedOperates onACCE-024J. Okonkwo (Quality Data Steward) → HAL Mobile capture A19Access record· NORTHBRIDGE-ALLOY / Sheffield Bar Mill
stateexpiredreviewacceptedretentionarchived
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: retention = held
Workflow as specified
CoreSync will grant approved, limited support views with payload minimization, access expiry and a complete audit trail, using protected platform services.
Evidence written in this session
Nothing run yet in this session. Record state shown above may already satisfy steps from the seeded fixture history.
Journeys that include it
Not part of a composite journey; exercised through its family views.