HCDI Certified Indexer
Unit 2.2 - Working on an engagement safely
Learning outcome - Sign in with two-factor authentication, pass the consent gate, and recognise what membership and a closed Deal Workspace allow.
Source note
Source basis - S2, physical PDF page 13.
HCDI platform rule (Unit 2.2).
Why it matters. Access is the first control. If you are careless with it, every later control is weaker.
The rules. Two-factor authentication is set up before work begins. Never show a password, a two-factor secret or a key. The practitioner gives consent before evidence, inquiry and scoring work. A Member sees only the engagements they belong to. A closed Deal Workspace stays readable and refuses every change.
How the platform says no. In one of three ways: a reason beside a disabled control, a refusal after an act, or a missing control. A missing control is also an answer. If a button you expected is absent, the platform has told you that you cannot do it. Common Error. Reading a missing control as a bug and looking for a workaround.
Governance Boundary. Never share your sign-in with a colleague, even one on the same engagement.
