IndicationsUse this when
- Sensitive documents sit next to general ones.
- Permissions grew by accident.
ContraindicationsDon’t, or be careful, when
- Not a security audit. If you have serious access problems, bring in IT or a security partner.
EquipmentWhat you need
- The inventory from P-01
- Admin access to your file storage, or someone who has it
ProcedureSteps
- Add an audience column to the inventory: everyone, managers, restricted.
- Move restricted material (pay, investigations, leave and medical details) out of general folders.
- Fix folder permissions to match the audience column.
- Write down the rule: any assistant may only answer from documents the person asking could already open.
ChecksHow you know it worked
- A sample of five employees can open everything marked everyone, and nothing marked restricted.
- The rule about assistants is written down and agreed.
HandoffWho owns it next
IT or whoever administers file storage keeps permissions aligned. Owners flag changes.
Sources
No external claims in this protocol.