User and Access Right

User Provisioning

User Management

  • Establish a schedule for regular review of user access rights
  • Define criteria for determining when access rights need to be updated or modified
  • Develop a process for promptly revoking access rights upon termination or job role change
  • Ensure that HR or relevant department notifies IT immediately of any changes
  • Implement monitoring tools to track user activity
  • Define thresholds for detecting unauthorized access or suspicious behavior
  • Maintain detailed records of user access rights
  • Conduct regular audits to ensure compliance with internal policies and external regulations

Access Control

Training and Awareness

Compliance and Audit

Related Checklists