Trusting People…

The foundation of a trust architecture is recognizing the need to trust people. People establish relationships with external entities, which, in turn rely on people to maintain the trust placed in them. People purchase and set up mechanisms. They write policies; they generate content. Absent trust in people, a trust architecture cannot succeed.

Define roles and responsibilities.

Consider in terms of individuals and groups.

Categorize by types, such as staff, contractors, and external advisors (e.g.,  the board of directors).

Take capabilities and intents into consideration in assessing potential acts that might be performed and the likelihood of them undertaking those acts.

The time frames for reviews of different activities and individuals varies based on the utilities they bring and the consequences over time of those utilities being lost or ill-used.