Section 2. Tools, access and data
4. Which tools and accounts does this workflow touch? Name each one, and who owns the login.
5. Who can grant admin access to [tool], and by what date?
6. Does this workflow read or write personal data about your customers or staff?
7. Who signs off that the automation is working correctly?
8. What happens today when this task is missed, and who notices?
