The worry
A federated program involves far more people than a central one. Security plans and control inventories describe what is protected and what is not, which makes them sensitive. More participants must not mean more people who can read them.
The team is the compartment
Each person can reach only the resources they need. In practice the resource team is the boundary: its members see its resources, its plans and its risks, and nobody else's.
Oversight without full access
The auditor role needs to see across teams, and that view can be graded. An organization can decide how far it extends:
- Scores and signals only, at team and resource level.
- Approved security plans as well.
- The full working record for a resource.
An auditor can also be scoped to particular teams, such as those in one unit or division.
Sharing what a service delivers
Shared services raise the same question in another form. A provider shares the inventory of what its service delivers to customers. Its own security plan, which describes how the service itself is protected, stays with the people accountable for it.
Why it matters for honesty
People record gaps honestly when they know who will see them. Compartmentalized access is part of what makes a truthful inventory safe to keep.
The same requirement applies to any tooling. Putting the Operating Model to Work lists it among the things to look for.