Identity & Endpoint

Identity & Access

Workforce and reporting-organisation identities · phishing-resistant MFA, adaptive access, just-in-time privilege and identity threat detection

Recent lifecycle events

Event	Person	Change	Access granted or removed	Time to apply	Status
Joiner	S•••• A•••• · BFIU analyst	New hire	AFC OS analyst role, passkey enrolment	12 min	Completed
Mover	A••• H•••••	Supervision → Intelligence	Removed GRC supervisor role, added analyst role	9 min	Completed
Leaver	C••••• · data migration	Contract ended	All access disabled, keys revoked, devices wiped	4 min	Completed
Leaver	R•• u••• · City Bank	Left the bank (notified by RO)	Client Portal access disabled	15 min	Completed

Lifecycle

✓HR → IAM

Joiner

Account and baseline access

✓User

Enrol

Passkey and managed device

✓Policy

Access

Adaptive, least privilege

✓Approvers

Elevate

Just in time and recorded

✓Managers

Review

Quarterly certification

✓ITDR

Detect

Identity threats and session theft

7IAM

Leaver

Disabled within 15 minutes