Establish and follow a documented process, preferably automated, for granting access to enterprise
assets upon new hire or role change of a user.
When a person starts an employment relationship, he or she is granted access to all data systems related to his or her role at once.
To ensure that authorized users have access to data systems and to prevent unauthorized access, the organization has defined formal processes for:
The implementation of these things must always take place through a defined, formal process.