Set the boundaries of delegation

Identify which purchases may continue, who may approve them and what value or purpose requires additional review. Ask the provider how temporary permissions can be assigned and removed. Document the start and end dates. Do not confuse the ability to click a payment button with business authority to approve the purchase. Both the technical access and the internal delegation should be clear to the employee covering the role.

Review the handback

When the usual approver returns, review exceptional payments and unresolved items together. Remove temporary access according to the supported process and retain the approval record. This makes cover arrangements repeatable rather than reinvented for each holiday. A well-run handover also improves resilience for unexpected absence, because the organisation learns which records and contacts a substitute needs before a genuinely urgent situation forces the issue and the normal approver cannot be reached.

Imagine this

Hypothetical example

A hypothetical studio's finance lead takes two weeks off. A deputy receives defined approval authority and access through the provider's supported controls. When the lead returns, they review the exception register and end the temporary arrangement, maintaining continuity without creating a permanent undocumented second approver.

Make it practical.

Use this checklist as you read. Checks are not stored.

References & further reading

Background reading — PCI Security Standards Council: merchant resources ↗

Published by Tap Tap Go. Product availability and eligibility vary by programme and market. About our stories.