How to use these templates
Researched: 2026-03-05
This guide is updated regularly. Sources are listed under “References & evidence.”
Each template follows the same structure:
- Outcome definition (what “done” means).
- Decision points + approval gates (thresholds, roles).
- Exception paths (owned, measurable).
- Evidence artifacts (queryable proof objects).
- Drift loop (should vs is → remediation).
Templates (by function)
Finance
- AP invoice approvals (exceptions + audit trails)
- Month-end close ledger (threshold approvals + evidence)
- Refund exception handling (rationale + approvals)
IT Ops
- Change approvals (risk gates + proof)
- Incident response (evidence trails + postmortems)
Support
- Deflection → escalation → closure requires SOP update
- Ticket triage to governed resolution (approval gates for risky actions)
HR
- Onboarding (policy acknowledgements + provisioning gates)
- Offboarding (access removal evidence)
Security / GRC
- Access requests (privileged approvals + evidence artifacts)
- Security attestations (exceptions + evidence ledger)
Starter checklist
- Pick one template and define the approval matrix.
- Define the evidence schema (records, attachments, links).
- Pick the top 5 exceptions and assign owners + SLAs.
- Run the first mission with HEIDI guidance; measure completeness and drift.