Checklist · People

Joiner, mover, leaver

Access and equipment steps for starting, changing roles, and leaving the organisation.

Owner: HR, IT and the line managerTime: 30 min eachISO 27001 A.6.1ISO 27001 A.5.18ISO 27001 A.6.5ISO 27001 A.8.1

0 of 18

Joiner (before day one)

Screening completed as required for the role and local law.
Signed contract includes confidentiality and acceptable-use obligations.
Accounts created from the role template, not copied from another person.
MFA enrolled on day one; a password manager is issued.
Laptop issued from the hardened image with disk encryption and EDR confirmed.
Security awareness training scheduled within the first week; policies acknowledged.

Mover (role or team change)

Access reviewed against the new role; old team access removed, not added to.
Privileged or production access re-approved by the new manager.
Shared mailboxes, groups, repositories and tool seats reassigned.
Ownership of systems, secrets and on-call duties handed over in writing.

Leaver (on the last day, or earlier if needed)

Single sign-on, VPN and email disabled at the agreed time; sessions and tokens revoked.
Personal API keys, SSH keys and deploy keys removed or rotated.
Shared passwords and secrets the person knew are rotated.
Devices, tokens and badges returned; devices wiped or re-imaged after the data is preserved.
Mailbox and files transferred to the manager; legal hold applied when required.
Access to third-party tools and customer systems removed; vendors informed where needed.
Reminder of continuing confidentiality obligations given at the exit interview.
Removal confirmed by a report from the identity provider, not by assumption.

Adjust it to your environment before relying on it. A finished list shows a routine was followed; it does not guarantee nothing was missed. ISO references show where a list helps, not that it satisfies a control.

See these as tasks in Cisodium All checklists

Ready to move
beyond legacy GRC?

14-day free trial. No credit card. Cloud or on-premises.

Request demo Talk to sales →

Joiner, mover, leaver

Joiner (before day one)

Mover (role or team change)

Leaver (on the last day, or earlier if needed)

Ready to movebeyond legacy GRC?

Ready to move
beyond legacy GRC?