Checklist · People

Joiner, mover, leaver

Access and equipment steps for starting, changing roles, and leaving the organisation.

Owner: HR, IT and the line managerTime: 30 min eachISO 27001 A.6.1ISO 27001 A.5.18ISO 27001 A.6.5ISO 27001 A.8.1

0 of 18

Joiner (before day one)

Screening completed as required for the role and local law.
Signed contract includes confidentiality and acceptable-use obligations.
Accounts created from the role template, not copied from another person.
MFA enrolled on day one; a password manager is issued.
Laptop issued from the hardened image with disk encryption and EDR confirmed.
Security awareness training scheduled within the first week; policies acknowledged.

Mover (role or team change)

Access reviewed against the new role; old team access removed, not added to.
Privileged or production access re-approved by the new manager.
Shared mailboxes, groups, repositories and tool seats reassigned.
Ownership of systems, secrets and on-call duties handed over in writing.

Leaver (on the last day, or earlier if needed)

Single sign-on, VPN and email disabled at the agreed time; sessions and tokens revoked.
Personal API keys, SSH keys and deploy keys removed or rotated.
Shared passwords and secrets the person knew are rotated.
Devices, tokens and badges returned; devices wiped or re-imaged after the data is preserved.
Mailbox and files transferred to the manager; legal hold applied when required.
Access to third-party tools and customer systems removed; vendors informed where needed.
Reminder of continuing confidentiality obligations given at the exit interview.
Removal confirmed by a report from the identity provider, not by assumption.

Adjust it to your environment before relying on it. A finished list shows a routine was followed; it does not guarantee nothing was missed. ISO references show where a list helps, not that it satisfies a control.

See these as tasks in Cisodium All checklists

Готови ли сте да надминете
класическия GRC?

14 дни безплатен пробен период. Без карта. В облак или локално.

Заявете демо Говорете с продажбите →

Joiner, mover, leaver

Joiner (before day one)

Mover (role or team change)

Leaver (on the last day, or earlier if needed)

Готови ли сте да надминетекласическия GRC?

Готови ли сте да надминете
класическия GRC?