Operational baseline. Named roles, reporting lines, and a short description of what each role owns — not just titles on an outdated slide.

Which systems, processes, or knowledge are held by only one person? SPOF analysis at the human level surfaces continuity risk that org charts hide.

Continuity discipline. Documented succession path for the senior IT role and any infrastructure lead whose departure would create a multi-month recovery gap.

Each policy in the IT portfolio (acceptable use, password, AI use, vendor data, etc.) has a named owner and a periodic review date. This captures policy maintenance discipline — not policy content(which lives in each policy's natural domain).