Fictional example. The configuration shown is invented to illustrate the framework.

See them as documents. The Service Card, internal System Card, and a Confidential risk-evidence review are available as printable documents. Use the View as document links below.

Service card

Layer 4 · ServiceRestricted InternalView as document

AI-assisted communications and triage in the admissions CRM, used by enrollment staff.

Audience
Enrollment staff
Data allowed
Confidential (PII)
Owner
Enrollment Management
Approved uses
Drafting outreach and summarizing interactions for staff review.
Not approved
Automated admission decisions; exporting PII.

System card

Layer 5 · SystemRestricted InternalView as document

A deeply configured deployment within the CRM boundary, handling student PII.

Controls
Least privilege, field-level restrictions, audit logging, human review.
Boundary
Confidential PII strictly within the CRM; no automated decisions.

Supporting evidence

Layer 7 · EvidenceConfidentialView as document

A confidential privacy & security review and risk-register entry sits behind this service.

  • Privacy (FERPA) and security review
  • Risk register entry with residual rating
  • Access-recertification records