Field notes
Facilitating control owners through entitlement decisions | Field notes — Siteridgepoint
Control owners often arrive tired of access reviews that feel like spreadsheet punishment. Facilitation is the difference between a session that finishes with decisions and one that ends with “we will check and come back.”
Open with system risk, not row counts
Start by restating why the system is sensitive—patient data, payment instructions, plant safety—then show only the privileged rows for that system. Owners engage faster when they see the operational consequence before the table.
Separate confirm from investigate
Give owners three clear actions: confirm, revoke, or park for investigation with a named follow-up date. Unlimited “maybe” options empty the calendar. Parked items belong in an exception log, not back in the main pile.
Respect operational windows
Schedule sessions away from month-end close or plant maintenance peaks. In Nelson Mandela Bay and other regional centres, a two-hour morning block often works better than a full-day marathon that pulls supervisors off the floor.
Close with visible ownership
End each workshop by reading back every revoke and park decision with the owner’s name attached. People remember what they heard aloud, and the attestation pack becomes easier to defend later.