Six groups: a business owner who picks the workflow and decides review points, an operations lead who runs supervised review, IT for access and connections, risk and model risk for testing, compliance for policies and the authority grid, and the vendor team. Risk should join on day 1, not at go-live.
