onboarding / offboarding
expressionIT supportsecurity
The account-and-access lifecycle at hiring and departure: created and granted on day one, revoked completely on the last - the second half is the audit finding.
Orphaned accounts of departed employees are a perennial breach vector.