Section 7 - RASCI Matrices¶
7.1 RASCI Framework and Methodology¶
The RASCI model is the primary tool used across the Simpaisa Group Operating Model to define accountability and responsibility for every material process. Each process is decomposed into discrete steps, and each step is assigned a RASCI designation for every relevant role.
Definitions
| Code | Role | Definition |
|---|---|---|
| R | Responsible | The individual or team who performs the work. Multiple R assignments per step are permitted. |
| A | Accountable | The single owner who approves the output and is ultimately answerable for the outcome. Only one A is permitted per process step. |
| S | Supportive | Provides active assistance - resources, capacity, or specialist input - to enable the Responsible party to complete the work. |
| C | Consulted | Must be consulted prior to a decision or action being taken; provides input that influences the outcome. Communication is two-way. |
| I | Informed | Notified of progress or outcomes after the fact. Communication is one-way. |
Governing Rules
- Every process step must have exactly one A (Accountable). Shared accountability is not permitted.
- Every process step must have at least one R (Responsible). The A and R may be held by the same individual only where the role is both executing and approving (typically at senior level).
- C designations require a defined input mechanism (meeting, sign-off, written comment). They are not advisory in name only.
- I designations must have a defined communication channel and frequency (e.g., automated system notification, weekly report, release note).
- No role should hold both C and I on the same step; if a role is consulted it is by definition informed.
- RASCI matrices are reviewed annually or upon material change to organisation structure, regulatory requirements, or product scope.
7.2 Merchant Onboarding (Pay-Ins and Pay-Outs)¶
Abbreviated role key:
| Abbreviation | Full Role |
|---|---|
| CPO | Chief Product Officer |
| COO | Chief Operating Officer |
| CFO | Chief Financial Officer |
| CISO | Chief Information Security Officer |
| CRO | Chief Revenue Officer |
| GH-RA | Global Head Regulatory Affairs |
| PM | Product Manager |
| Int.Lead | Integration Lead |
| H-Legal | Head of Legal |
| H-Treas | Head of Treasury |
| H-Sett | Head of Settlements |
| Comp.An | Compliance/Regulatory Analyst |
| San.Scr | Sanctions Screening |
| PCP | Payment Channel Partnerships |
| SQA | SQA Lead |
| PMO | PMO Manager |
Process Flow
| Process Step | CPO | COO | CFO | CISO | CRO | GH-RA | PM | Int.Lead | H-Legal | H-Treas | H-Sett | Comp.An | San.Scr | PCP | SQA | PMO |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Lead qualification | C | A | I | - | I | - | R | - | - | - | - | - | - | R | - | I |
| 2. KYB / CDD | I | C | I | - | C | C | S | - | S | - | - | R | R | - | - | - |
| 3. Commercial terms negotiation | C | A | C | - | - | - | R | - | S | C | C | - | - | S | - | I |
| 4. Legal agreement execution | I | C | I | - | C | C | S | - | A | - | - | C | - | - | - | I |
| 5. Technical integration | C | I | - | C | - | - | C | A | - | - | - | - | - | S | S | R |
| 6. Testing / UAT | C | I | - | C | - | - | C | S | - | - | I | - | - | S | A | R |
| 7. Go-live approval | A | C | I | C | C | I | R | S | - | I | I | I | - | S | S | S |
| 8. Post-launch review | C | A | C | - | C | - | R | S | - | S | R | S | - | S | S | R |
7.3 Payment Transaction Processing - Collections (Pay-Ins)¶
Abbreviated role key:
| Abbreviation | Full Role |
|---|---|
| CTO | Chief Technology Officer |
| COO | Chief Operating Officer |
| CFO | Chief Financial Officer |
| CISO | Chief Information Security Officer |
| CRO | Chief Revenue Officer |
| H-Sett | Head of Settlements |
| H-Treas | Head of Treasury |
| Int.Lead | Integration Lead |
| DevOps.L | DevOps Lead |
| H-DevOps | Head of DevOps |
| San.Scr | Sanctions Screening |
| Comp.An | Compliance/Regulatory Analyst |
| PCP | Payment Channel Partnerships |
| PM | Product Manager |
Process Flow
| Process Step | CTO | COO | CFO | CISO | CRO | H-Sett | H-Treas | Int.Lead | DevOps.L | H-DevOps | San.Scr | Comp.An | PCP | PM |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. API request received | I | I | - | I | - | I | - | S | R | A | - | - | - | I |
| 2. Payment method routing | C | I | - | I | - | S | - | C | R | A | - | - | S | C |
| 3. Channel authorisation | I | I | - | C | - | S | - | S | R | A | - | - | C | - |
| 4. Transaction processing | C | I | - | C | C | S | - | S | R | A | R | - | S | - |
| 5. Success / failure notification | I | I | - | - | - | S | - | R | S | A | - | - | S | I |
| 6. Reconciliation | I | C | C | - | C | A | R | - | S | S | - | S | - | - |
| 7. Settlement to merchant | I | C | A | - | C | R | R | - | - | - | - | S | - | - |
7.4 Payment Transaction Processing - Disbursements (Pay-Outs)¶
Process Flow
| Process Step | CTO | COO | CFO | CISO | CRO | H-Sett | H-Treas | Int.Lead | DevOps.L | H-DevOps | San.Scr | Comp.An | PCP | PM |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Disbursement request received | I | I | - | I | - | I | I | S | R | A | - | - | - | I |
| 2. Compliance screening | - | I | - | - | A | - | - | - | - | S | R | R | - | - |
| 3. Float / balance check | I | C | C | - | C | S | A | - | - | - | - | - | - | - |
| 4. Channel routing | C | I | - | I | C | S | - | C | R | A | - | - | R | C |
| 5. Funds transfer execution | I | C | I | C | C | S | C | S | R | A | - | - | R | - |
| 6. Confirmation | I | I | - | - | - | S | - | R | S | A | - | - | S | I |
| 7. Reconciliation | I | C | C | - | C | A | R | - | S | S | - | S | - | - |
| 8. Settlement | I | C | A | - | C | R | R | - | - | - | - | S | - | - |
7.5 Remittance Corridor Activation¶
Process Flow
| Process Step | CEO | CPO | COO | CFO | CRO | CISO | GH-RA | CH-PK | CH-BDNP | H-Legal | H-Treas | H-Sett | PM | Int.Lead | Comp.An | PCP | SQA | PMO |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Corridor demand assessment | C | A | C | C | C | - | C | C | C | - | C | C | R | - | S | S | - | S |
| 2. Regulatory scoping | I | C | C | I | C | - | A | R | R | S | I | - | S | - | R | - | - | S |
| 3. Partner identification | I | C | A | I | C | - | C | S | S | - | C | C | R | - | - | R | - | S |
| 4. Legal agreements | I | I | C | I | C | - | C | C | C | A | C | - | S | - | S | S | - | I |
| 5. Technical integration | - | C | I | - | - | C | - | S | S | - | - | I | C | A | - | S | S | R |
| 6. Compliance setup | - | I | I | - | C | C | C | S | S | - | - | - | I | - | A | - | S | S |
| 7. Testing | - | C | I | - | I | C | I | S | S | - | I | I | C | S | S | S | A | R |
| 8. Go-live | C | A | C | C | C | C | C | R | R | I | I | I | S | S | S | S | S | S |
7.6 Crypto Off-Ramp Transaction Processing¶
Process Flow
| Process Step | CTO | COO | CFO | CISO | CRO | GH-RA | H-Treas | H-Sett | DevOps.L | H-DevOps | San.Scr | Comp.An | Int.Lead | PM |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Crypto receipt notification | I | I | - | I | I | - | I | I | R | A | - | - | S | I |
| 2. Blockchain verification | C | I | - | C | C | - | - | - | R | A | - | S | R | I |
| 3. AML / sanctions screening | I | I | - | - | A | C | - | - | - | S | R | R | - | - |
| 4. FX conversion | I | C | C | - | C | I | A | S | - | - | - | - | - | - |
| 5. Fiat disbursement | I | C | I | C | C | - | S | S | R | A | - | - | S | - |
| 6. Confirmation | I | I | - | - | - | - | S | S | R | A | - | - | R | I |
| 7. Reconciliation | I | C | C | - | C | - | R | A | S | S | - | S | - | - |
7.7 White-Label Wallet Provisioning¶
Process Flow
| Process Step | CPO | COO | CFO | CTO | CISO | CRO | GH-RA | H-Legal | PM | Int.Lead | Princ.Arch | Comp.An | SQA | DevOps.L | PMO |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Client requirements gathering | A | C | I | I | - | - | - | - | R | R | C | - | - | - | S |
| 2. Product configuration | C | I | - | C | C | - | - | - | A | R | R | - | S | S | S |
| 3. Regulatory assessment | C | C | I | - | - | C | A | S | S | - | - | R | - | - | S |
| 4. Technical setup | I | I | - | A | C | - | - | - | C | R | R | - | S | R | S |
| 5. Branding / customisation | A | I | - | I | - | - | - | - | R | R | S | - | - | - | S |
| 6. Testing | C | I | - | C | C | I | - | - | C | S | S | - | A | R | R |
| 7. Go-live | A | C | I | C | C | C | C | I | R | S | S | S | S | S | S |
| 8. Ongoing support | I | A | I | C | C | I | I | - | R | R | S | S | S | S | S |
7.8 KYC / KYB and Customer Due Diligence¶
Process Flow
| Process Step | COO | CFO | CRO | CISO | GH-RA | CH-PK | CH-BDNP | H-Legal | Comp.An | San.Scr | PM |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Application received | I | - | I | - | I | I | I | - | A | R | I |
| 2. Document collection | - | - | I | - | I | S | S | - | A | R | - |
| 3. Identity verification | - | - | I | C | I | - | - | - | A | R | - |
| 4. Sanctions screening | - | - | C | C | C | - | - | - | S | A | - |
| 5. Risk scoring | - | - | A | - | C | C | C | - | R | S | - |
| 6. EDD (if required) | C | - | A | - | C | C | C | S | R | R | - |
| 7. Approval / rejection | I | I | A | - | C | C | C | C | R | S | I |
| 8. Ongoing monitoring | I | - | A | C | C | S | S | - | R | R | - |
7.9 Sanctions Screening and Transaction Monitoring¶
Process Flow
| Process Step | COO | CRO | CISO | GH-RA | H-Legal | H-DevOps | Comp.An | San.Scr | DevOps.L | PM |
|---|---|---|---|---|---|---|---|---|---|---|
| 1. Screening trigger (transaction / entity) | I | I | I | - | - | I | I | R | A | I |
| 2. Automated screening (Eastnets) | - | I | C | - | - | S | S | R | A | - |
| 3. Hit / no-hit determination | - | I | - | - | - | - | S | A | S | - |
| 4. False positive review | - | C | - | C | - | - | R | A | - | - |
| 5. Escalation to Compliance | I | A | I | C | C | - | R | R | - | - |
| 6. SAR / STR filing (if required) | I | C | - | A | R | - | R | S | - | - |
| 7. Record keeping | I | C | C | C | A | S | R | R | S | - |
7.10 Settlement and Reconciliation¶
Process Flow
| Process Step | CFO | COO | CRO | CTO | H-Sett | H-Treas | H-DevOps | Comp.An | DevOps.L | PM | PMO |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Transaction data aggregation | I | I | - | C | S | - | S | - | R | A | - |
| 2. Three-way reconciliation | C | I | - | - | A | R | S | - | S | - | S |
| 3. Break identification | C | I | - | - | A | R | S | S | S | - | S |
| 4. Exception investigation | C | C | C | - | A | R | S | S | - | - | S |
| 5. Settlement calculation | C | I | C | - | S | A | - | C | - | - | - |
| 6. Payment execution | C | C | - | - | S | A | - | - | - | - | - |
| 7. Reporting | A | C | C | - | R | R | - | S | - | - | R |
7.11 Incident Management and Escalation¶
Process Flow
| Process Step | CEO | COO | CTO | CISO | CRO | H-DevOps | DevOps.L | Princ.Arch | Int.Lead | SQA | PM | PMO | Comp.An |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Incident detection (NOC / SOC) | - | I | I | I | - | I | R | - | - | - | - | - | - |
| 2. Classification (P1–P4) | - | I | C | C | I | A | R | C | - | S | I | - | I |
| 3. Initial response | - | I | C | C | - | A | R | S | S | - | I | - | I |
| 4. Investigation | - | C | A | C | C | S | R | R | R | S | C | - | C |
| 5. Resolution | - | C | A | C | - | S | R | R | R | R | C | - | - |
| 6. Stakeholder communication | I | A | C | C | C | - | - | - | - | - | R | R | C |
| 7. Post-incident review | - | C | A | C | C | S | R | R | S | S | C | R | C |
| 8. Root cause remediation | - | C | A | C | - | S | R | R | S | S | C | R | - |
7.12 New Market Entry and Licence Application¶
Process Flow
| Process Step | CEO | COO | CPO | CFO | CRO | CISO | GH-RA | CH-PK | CH-BDNP | H-Legal | H-Treas | Comp.An | PCP | PMO | Int.Lead |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Market assessment | A | C | R | C | C | - | R | C | C | - | C | S | S | S | - |
| 2. Entity incorporation | C | C | - | C | - | - | S | - | - | A | S | - | - | S | - |
| 3. Licence application preparation | C | C | I | C | C | - | A | S | S | R | S | R | - | S | - |
| 4. Regulatory submission | I | I | - | I | C | - | A | S | S | R | - | R | - | S | - |
| 5. Local team hiring | C | A | - | C | - | - | C | R | R | C | - | - | - | S | - |
| 6. Banking relationships | C | C | - | A | C | - | C | S | S | C | R | - | - | S | - |
| 7. Payment channel integration | - | C | C | - | - | C | I | S | S | - | - | - | R | S | A |
| 8. Compliance setup | - | C | - | - | C | C | A | R | R | S | - | R | - | S | - |
| 9. Go-live | A | R | R | C | C | C | C | R | R | C | C | C | S | S | S |
7.13 Product Development Lifecycle¶
Process Flow
| Process Step | CPO | CTO | COO | CISO | CRO | GH-RA | PM | Int.Lead | Princ.Arch | H-DevOps | DevOps.L | SQA | PMO | Comp.An |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Market research / discovery | A | I | C | - | - | C | R | - | - | - | - | - | S | C |
| 2. PRD authoring | A | C | C | C | C | C | R | S | C | - | - | - | S | C |
| 3. Architecture review | C | A | - | C | - | - | C | S | R | S | - | - | S | - |
| 4. Sprint planning | C | C | - | - | - | - | R | R | S | S | S | S | A | - |
| 5. Development | I | A | - | C | - | - | C | R | S | S | R | S | S | - |
| 6. QA testing | I | C | - | C | - | - | C | S | S | S | S | A | S | - |
| 7. UAT | C | I | C | C | C | C | A | S | - | - | - | R | S | S |
| 8. Production deployment | I | A | I | C | - | - | C | S | S | R | R | S | S | - |
| 9. Post-launch monitoring | C | C | C | C | C | I | A | S | - | R | R | S | R | S |
7.14 Financial Reporting and Audit¶
Process Flow
| Process Step | CEO | COO | CFO | CRO | GH-RA | CH-PK | CH-BDNP | H-Legal | H-Treas | H-Sett | Comp.An | H-DevOps |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Transaction data capture | - | I | I | - | - | - | - | - | S | A | - | R |
| 2. Ledger posting | - | - | A | - | - | - | - | - | R | R | - | S |
| 3. Reconciliation | - | I | A | - | - | - | - | - | R | R | - | S |
| 4. Management accounts preparation | I | C | A | C | - | C | C | - | R | S | - | - |
| 5. Statutory accounts | I | C | A | C | I | C | C | C | R | - | - | - |
| 6. External audit | I | I | A | C | I | S | S | C | R | S | S | S |
| 7. Regulatory filings | I | C | C | C | A | R | R | R | S | - | R | - |
| 8. Board reporting | A | R | R | R | S | R | R | - | S | - | S | - |
7.15 Vendor and Partner Onboarding¶
Process Flow
| Process Step | COO | CFO | CTO | CISO | CRO | H-Legal | H-Treas | PM | Int.Lead | Princ.Arch | Comp.An | SQA | PMO | PCP |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Vendor identification | C | I | C | - | I | - | I | R | S | S | - | - | S | A |
| 2. Due diligence | C | C | C | C | A | S | C | S | - | - | R | - | S | S |
| 3. Commercial negotiation | A | C | I | - | - | S | C | S | - | - | - | - | S | R |
| 4. Legal agreement | C | I | I | C | C | A | - | S | - | - | S | - | S | S |
| 5. Technical integration | I | - | A | C | - | - | - | C | R | R | - | S | S | S |
| 6. Security assessment | - | - | C | A | C | - | - | - | S | S | S | R | S | - |
| 7. Go-live | A | I | C | C | C | I | I | R | S | S | S | S | S | S |
| 8. Performance monitoring | A | C | C | C | C | - | C | R | S | - | S | S | R | S |
7.16 Technology Change Management (Releases)¶
Note: CAB = Change Advisory Board, comprising CTO, CISO, H-DevOps, Princ.Arch, SQA Lead, and PM as standing members. The COO holds observer rights for P1-impacting changes. The CAB chair is the CTO.
Process Flow
| Process Step | CTO | COO | CISO | CRO | H-DevOps | DevOps.L | Princ.Arch | Int.Lead | SQA | PM | PMO | Comp.An |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1. Change request | I | I | I | - | I | - | - | S | - | A | R | - |
| 2. Impact assessment | C | I | C | C | S | S | R | S | S | S | A | C |
| 3. Architecture review | C | - | C | - | S | - | A | S | - | C | S | - |
| 4. Development | I | - | - | - | S | R | S | R | S | C | S | - |
| 5. QA / testing | I | - | C | - | S | S | S | S | A | C | S | - |
| 6. Security review | C | - | A | - | S | - | S | - | S | - | S | C |
| 7. CAB approval | A | I | R | I | R | - | R | - | R | R | S | C |
| 8. Deployment | I | I | I | - | A | R | S | S | - | I | S | - |
| 9. Post-deployment monitoring | C | I | C | - | A | R | S | S | R | C | R | - |
Version: 1.0 | Review cycle: Annual or upon material organisational change | Owner: COO