4_1_Sample_RACI_Matrix.xlsx

	A	B	C	D	E	F	G
1	RACI Matrix: Password Reset Workflow
2	Sample RACI Matrix for Template 4.1 - Appendix C
3
4	RACI Legend
5		R = Responsible	Performs the work to complete the activity
6		A = Accountable	Ultimately answerable for the correct completion
7		C = Consulted	Provides input and must be consulted before action
8		I = Informed	Kept informed of progress or decisions
9
10	#	Workflow Step	End User	Authentication System	Email System	IT Support	Security Team
11	1	User clicks "Forgot Password"	R	I
12	2	User enters email address	R	I
13	3	System validates email exists	I	R/A
14	4	System generates reset token		R/A			C
15	5	System sends reset email	I	C	R/A
16	6	User checks email & clicks reset link	R	I
17	7	System validates token & expiry	I	R/A
18	8	User enters new password	R	I
19	9	System updates password		R/A			I
20	10	System invalidates token		R/A			C
21
22	Exception Handling
23	E1	Email not found - Manual reset	C	I		R/A
24	E2	Token invalid/expired - Manual reset	C	I		R/A	I
25	E3	Support verifies user identity	R	I		A	C
26	E4	Support creates temporary password		C	R	A	I
27
28	Notes:
29	• Each activity should have exactly one 'A' (Accountable) role
30	• Activities can have multiple 'R' (Responsible) roles who do the work
31	• Use 'R/A' when the same role is both Responsible and Accountable
32	• Limit 'C' (Consulted) to those whose input is essential
33	• Keep 'I' (Informed) to those who truly need updates
34	• Exception handling steps are marked with 'E' prefix
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100