Governance & Security

Roles defined

51 accounts assigned

Audit status

Illustrative

All required events captured

Masked field groups

Payroll, consumer PII, pricing, credit

Open security alerts

None critical

Environments

· clear separation between build, test and demonstration

Development

Sandbox connectors, synthetic data, no production credentials.

Test

Synthetic sample data for illustrative integration testing.

CDO Demonstration Environment

This environment. Demonstration data only — not live CDO integrations.

· role-based access control

Role	Users	System permissions		Sensitive field masking	Approval controls	Environments
Admin	3	All	All	Not applied	Can approve all	Dev · Test · CDO Demonstration Environment
Integration Manager	6	All except HR payroll	All	Payroll fields masked	Can approve flows	Dev · Test · CDO Demonstration Environment
Developer	11	Assigned systems	Read + sandbox write	PII masked	Cannot approve	Dev · Test
Business Analyst	18	Read only	Read only	PII masked	Cannot approve	Test · CDO Demonstration Environment
Auditor	4	Metadata only	Metadata only	All sensitive fields masked	Cannot approve	CDO Demonstration Environment
Executive Viewer	9	Dashboards only	None	All sensitive fields masked	Cannot approve	CDO Demonstration Environment

Connector credential expiring
medium
Distributor SFTP key expires in 9 days.
Unusual API key usage
low
Marketing key used from a new IP range — verified by owner.
Masking rule applied
low
Payroll fields masked for 18 Business Analyst accounts.