M4.4 TERMINATION OR CHANGE OF EMPLOYMENT
OBJECTIVE
To ensure that employees, contractors and third party users exit an entity or change employment in an orderly manner.
PERFORMANCE INDICATOR
Percentage employees, contractors and third party user accounts that are blocked after termination.
Percentage of employees, contractors and third party users accounts which profiles are modified based on role change.
AUTOMATION GUIDANCE
An identity management system could be used to automatically disable terminated employee accounts and identify user accounts that are inactive.
RELEVANT THREATS AND VULNERABILITIES
- Abuse of system access/privileges
- Intentional leaks and sharing of data by staff
- Illegal processing of data
APPLICABLE CONTROLS
Followings are controls applicable for this control family.
