How Authorising Officers, Key Contacts and Level 1 and Level 2 Users should be selected, governed and supported.
01
Select people who can exercise real control.
Key personnel must satisfy the applicable suitability and connection requirements. The Authorising Officer should be sufficiently senior and responsible for the organisation’s sponsor compliance.
A nominal appointment without time, information or influence creates a governance gap even where the individual meets the formal definition.
02
Separate system access from decision authority.
Level 1 and Level 2 Users carry out specified SMS activity. Internal governance should state who may decide that a report is required, approve a Certificate of Sponsorship and escalate uncertainty.
Access should be reviewed when roles change, people leave, responsibility transfers or the sponsor’s structure changes.
03
Build continuity and oversight.
Absence or departure of one individual should not disable the licence. Deputies, access control, handover records and periodic Authorising Officer review support continuity.
A concise governance report should show sponsored population, upcoming decisions, exceptions, late items, remediation and material changes requiring senior attention.