• Cornerstone Permissions Self-Check

  • How exposed is your Cornerstone portal?
    Find out in about 3 minutes.

    10 multiple-choice questions about how your team manages security roles and access

    • No login or portal data needed; “Not sure” is a valid answer
    • See your score and the areas driving it as soon as you finish
    • Add your email at the end if you’d like a one-page report with next steps

    Best completed by the person who owns or administers your Cornerstone portal.

    This is a self-assessment of your practices, not an audit of your portal.

  • When did your team last review who holds each Cornerstone security role?*
  • Does each security role have a written purpose, an owner who approves changes, and a definition of who should hold it?*
  • About how many active security roles does your portal have?*
  • How are new security roles usually created?*
  • How many people hold admin-level access, such as rights to manage security roles or system settings?*
  • Are admin rights delegated to business units, regions, or outside partners?*
  • When an employee changes jobs or leaves, what happens to their Cornerstone security roles?*
  • How are security roles assigned to users?*
  • What is the most sensitive data your Cornerstone portal holds?*
  • If an auditor asked today for a list of everyone who can see performance or compensation data, how long would it take to produce one you trust?*
  • Would you like your one-page report by email?*
  • Your role
  • Is an audit or access review planned in the next 6 months?
  • Should be Empty: