/workflow-automation

name: workflow-automation
description: "Design human-in-the-loop workflow orchestration for securities operations: task routing, approval chains, and SLA monitoring. Use when building multi-level approval chains with dollar thresholds and delegation of authority, enforcing four-eyes (maker-checker) controls, defining escalation rules for aging work items approaching SLA breach, designing human-in-the-loop gates, selecting a workflow engine or BPM platform (Camunda, Pega, ServiceNow), modeling a process as a state machine, adding audit trails for SEC Rule 17a-3/17a-4 or FINRA supervisory obligations, or migrating from email-and-spreadsheet tracking. For zero-touch automation rates and STP measurement, see stp-automation."

Workflow Automation

Core Concepts

1. BPM Fundamentals for Financial Operations

Business process management (BPM) is the discipline of modeling, executing, monitoring, and improving operational processes. In securities operations, BPM applies to every repeatable process that involves multiple steps, multiple participants, or decision points: account opening, account maintenance requests, transfer processing, corporate action elections, reconciliation break resolution, and billing exception handling.

**Process modeling.** A workflow begins as a process model — a formal representation of the steps, decision points, roles, and data flows in an operational process. The model serves three purposes: (1) it documents how the process works for training, audit, and examination purposes, (2) it provides the blueprint for automation, and (3) it establishes the baseline for measurement and improvement.

**Process modeling notation.** BPMN 2.0 is the industry standard for process modeling; model operational processes with tasks, decision gateways, start/intermediate/end events, and swim lanes per responsible role so that handoffs between operations, compliance, and external systems are explicit and visible.

**Process decomposition.** Complex operations workflows are decomposed into sub-processes. An account opening workflow decomposes into: data collection, KYC verification, document review, custodian submission, confirmation processing, and account activation. Each sub-process can be modeled, automated, and measured independently while the parent process orchestrates the sequence.

**State machines for financial workflows.** Many operations items are best modeled as state machines — an item exists in one of several defined states, and transitions between states are triggered by events or actions. A transfer request might have states: Initiated, Validated, Submitted to ACATS, In Progress, Completed, Rejected, Cancelled. Each transition has a guard condition (e.g., the transition from Validated to Submitted requires all validation checks to pass) and an action (e.g., send ACATS message). State machines enforce that items follow valid paths and prevent invalid transitions (an item cannot move from Initiated to Completed without passing through Validated and Submitted).

2. Task Routing and Assignment

Task routing determines which person or team receives a work item when it enters the workflow. Effective routing minimizes queue wait time, balances workload, and ensures items reach someone with the appropriate skill and authority.

**Role-based routing.** The simplest routing strategy. Each task type is assigned to a role (e.g., "Account Opening Analyst," "Transfer Specialist," "Senior Operations Reviewer"), and any person filling that role can pick up the task. Role-based routing is sufficient when all members of a role have equivalent skills and authority.

**Skill-based routing.** Extends role-based routing by matching task attributes to individual skill profiles. A trust account opening routes to analysts certified in entity account processing. A cross-border transfer routes to analysts with international custody experience. Skill-based routing reduces rework by ensuring the first handler has the competence to resolve the item.

**Round-robin assignment.** Tasks are distributed evenly across team members in rotation. Round-robin prevents any one person from being overloaded but does not account for task complexity or individual capacity. It works well when tasks are roughly uniform in effort.

**Workload-based assignment.** Tasks are assigned to the team member with the lowest current workload, measured by the number of open items, the total estimated effort of open items, or a weighted score that considers both. Workload-based assignment adapts to variable throughput across team members and handles uneven task complexity better than round-robin.

**Queue management.** When tasks cannot be immediately assigned (because all qualified team members are at capacity), they enter a queue. Queue management includes: priority ordering within the queue (SLA deadline, dollar value, client tier), visibility into queue depth and wait time for management, and automatic re-routing if a queue exceeds a defined depth or wait-time threshold.

**Capacity planning.** Historical data on task volumes, processing times, and SLA targets feeds capacity models that determine how many staff are needed for each role. Workflow systems capture the data needed for capacity planning: arrival rate (tasks per hour/day), service rate (average processing time per task), and queue wait time.

3. Approval Chains and Authorization

Many operations tasks require one or more approvals before proceeding. Approval chains enforce segregation of duties, limit authority by seniority and dollar value, and create a documented decision trail.

**Multi-level approval workflows.** A simple task may require one approval (e.g., standard account maintenance reviewed by a team lead). A high-risk task may require two or three levels (e.g., a large wire transfer reviewed by an operations analyst, then a senior manager, then a compliance officer). The number of approval levels is determined by the risk profil