Standard
Delegation-of-Authority Standard
This standard defines the delegation instrument: the recorded artefact by which a role holding an authority grants some part of it to another subject. The corpus provides typical, adjustable role authorities (governance/register-role-authority.md, whose column is "Typical Approval Authority") and refers to delegation only incidentally ("or delegate", "CIO or delegate"), with no standard for how a delegation is constituted, bounded, evidenced, sub-delegated, or revoked. This standard supplies that instrument, so a delegated authority is as governed as the authority it derives from.
- Type
- Standard
- Version
- 0.0.2
- Date
- 2026-08-31
- Owner
- GRC Programme Manager
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Core Governance
- Review frequency
- Annual or as required by regulatory or framework change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Applicability
- 3. Relationship to other GRC documents
- 4. Minimum requirements
- 5. Evidence requirements
- 6. Compliance notes
- 7. Framework alignment
Frameworks it maps to
Related documents
- Role Authority Registergovernance
- Key Terms and Definitions Registergovernance
- Exception and Risk Acceptance Management Policygovernance
- Access Control Proceduresecurity
- Privileged Access Management Standardsecurity
- Capability Is Not Authority Principlegovernance
- Data Retention Schedulegovernance
Next
All Documents