Look at the workflow
A useful review follows delegated objectives into tools, permissions, execution, escalation and consequences. The same system can have different governance needs in different workflows.
Keep authority visible
Organizations need a practical view of what was authorized, where responsibility sits and whether people can challenge, constrain or stop the activity in time.
Begin with a bounded use case
Choose one material workflow and establish its evidence boundary before expanding the assessment.