cds-snc / platform-forms-client

NextJS application that serves the public-facing website for Forms
https://forms-staging.cdssandbox.xyz/
MIT License
35 stars 13 forks source link

Policy research: What information is required to validate an S.32 approval #622

Open srtalbot opened 2 years ago

srtalbot commented 2 years ago

User story: Persona based As a compliance officer I need to validate that the approval signature was provided by the person who has the authority When I am reconciling purchasing information for S.32 signatures So that there is an auditable trail of who approved, and they are the right person.

Story context Like many forms in government, the training authorization and application form requires a signature from the person delegated with S.32 approval.

S.32 approval is the signature required to allocate funds from a costing centre to start the purchasing of a good or service.

The level of assurance (LoA) policy requirement for an S.32 signature in TBS is not know. Further, the specific information required to validate that assurance is not known.

Our goal is to understand what information is validated, through what processes, and tools, so that we can provide the appropriate LoA through GC Forms.

Acceptance criteria

sarahpiovesana commented 2 years ago

LoA for Section 32 is Level 3.