Approvals and accountability
How do I know who changed or approved something?
Require named user accounts and keep a history of important changes and decisions. Record who acted, what changed, when it happened, and the prior value when that matters. Avoid shared accounts for actions that need accountability.
What to check
- Are important actions tied to named users?
- Can you see the old and new value?
- Are shared accounts being used for approvals or changes?