Access and lifecycle
Access reviews, joiners, movers and leavers, and evidence that holds up in front of an auditor.
Articles
Employee Offboarding Checklist: OAuth Grants, Sessions and API KeysDisabling the directory account is the first step of offboarding. This checklist covers the sessions, OAuth grants and keys that outlive it.
User Access Review Checklist: 12 Steps From Scope to EvidenceA user access review checklist in 12 steps: scope, reviewers, evidence on each row, the no-response rule, removal after the review, and the export.
SOC 2 User Access Reviews: Cadence, Evidence and What Auditors CheckSOC 2 sets no access review schedule. What CC6.2 and CC6.3 expect, the evidence auditors sample, and the exceptions they write up.
