Below L1 → L1Automation inventory
Before
Scripts and no-code flows run across the company with no owner, no monitoring and an unknown blast radius.
After
Every automation documented with an owner, monitoring and dependencies. The auditor's first question, answered.
L1 → L2Joiner-mover-leaver provisioning
Before
Accounts are created by hand in six systems, access is copied from 'someone similar', and leaver access is found six months later.
After
The HR record creates accounts by role, with a tested de-provisioning path. Missing data halts and alerts a named owner.