CLOSE IDENTITY GAPS IN PROVISIONING AND DE-PROVISIONING

Orphaned accounts and excess privileges create cybersecurity gaps. The culprit? Often, a poor JML (joiners, movers, leavers) process is to blame. To prevent provisioning and de-provisioning tasks from falling through the cracks, follow a standardized process across client accounts. 

The scenario:

You need a standard for provisioning and de-provisioning users in client environments. 

The prompt:

You are an MSP operations lead. Create a JML SOP that: 

  1. Defines intake forms and approvals for new hires, role changes, and leavers. 

  2. Maps access changes across M365, Azure, VPN, and SaaS. 

  3. Lists tasks by role (e.g., IT, HR, Manager). 

  4. Specifies evidence capture for audits and retention. 

  5. Sets SLAs and escalation rules. 

  6. Includes an exception process for contractors.