- Severity
- LOW
- Status
- CLOSED
- Owner
- HR Technology
- Root cause
- Access management
- Test failure
- Operating effectiveness (COE)
- Opened
- 2025-03-10
- Due
- 2025-09-30
- Closed
- 2025-08-15
158 days old as of 2026-07-01
Excess HRIS admin roles removed following semi-annual review.
PASS
tested 2026-01-25
This issue records a COE failure, shown first.
Control Operating Effectiveness (COE)
Procedures evaluating whether the control operated over the testing period.
- 1.Select 25 HRIS role assignments and confirm each was reviewed within the semi-annual cadence.
- 2.Confirm roles flagged for removal during review were revoked.
- 3.Confirm late reviews were escalated and tracked to completion.
Control Design Assessment (CDA)
Procedures evaluating whether the control is designed adequately.
- 1.Obtain and read the HR role-review procedure; confirm it defines the semi-annual cadence and reviewer responsibilities.
- 2.Confirm the review covers all HRIS roles with elevated or sensitive access, not only administrator roles.
Related issues
Same root cause or a shared entity
Score contribution
Issue-pressure points as of 2026-07-01, before the factor is capped at 0–100.
- HR Information System1.25 of 1.25 pts
100% of this entity’s issue pressure
Annual priority score: 29 · issue pressure carries 10% weight in the active model — one factor among several behind that score.
- Closed within the year, residual signal: 5 x 0.25 = 1.25
Linked entities
- HR Information System
APPLICATION · MODERATE