IAM-10—Role Change: People Resources Notification

>Control Description

The People Resources system sends a notification to relevant management and relevant information system administrators in the event of an employee reassignment or transfer of an information system user.

Theme

Technology

Type

Preventive

Policy/Standard

Access Management Procedure

>Implementation Guidance

1. Design and document a process for Logical Access and requirements for access modification in case of transfer or reassignment. 2. Ensure access management portal sends a notification to concerned personnel.

>Testing Procedure

1. Inspect resource management portal to check if the relevant stakeholders are informed upon an event of an employee reassignment or transfer of an information system user.