Check only the service controls that are true today. The service, mission work, users, boundaries, critical periods, and accountable owner are written. Support has one visible intake path, request classes, severity rules, routing, and communication ownership. Primary and backup administrators can reach nonprofit-owned accounts, recovery methods, and current runbooks. Privileged, vendor, integration, dormant, joiner, mover, and leaver access is reviewed on a schedule. Integrations and data jobs have owners, expected results, monitoring, reconciliation, and recovery paths. Configuration and releases have proportionate review, safe testing, rollback, communication, and close evidence. Contracts, support cases, renewals, price changes, license fit, commitments, exports, and exit limits are tracked. A monthly operating review and quarterly service review turn evidence into owned decisions.