Free checklist review

Walk your answers with us

Pick a date and time. Prefer email for a session link, or a phone number for a direct call. Adjust any Yes / Partial / No answers below — they are included in your request, so you do not need the PDF.

Your checklist

Set or change Yes / Partial / No for each item — your booking email will include this summary.

Joiner - Day-one access

New hires get core systems on day one without a spreadsheet chase Okta / Entra / Google, email, Slack/Teams, badge

Yes Partial No

Role templates exist for at least your top 5 job families Engineering, Sales, Finance, Support, Contractor

Yes Partial No

Contractors and vendors follow a separate, shorter-lived joiner path Not the same as FTEs

Yes Partial No

Mover - Role and org changes

When someone changes role, old entitlements are removed - not only added Privilege accumulates silently

Yes Partial No

Department moves trigger an access review within 7 days HRIS change to ticket or automation

Yes Partial No

Managers can see what their team currently has access to Without opening a ticket to IT

Yes Partial No

Leaver - Offboarding

Terminated employees lose all access within 24 hours IdP, SaaS, cloud, VPN, badge

Yes Partial No

You can list every account disabled for leavers in the last 90 days Evidence for auditors

Yes Partial No

Personal / forwarding rules and shared mailboxes are reviewed on exit Classic blind spot

Yes Partial No

GitHub / cloud PATs and API keys are revoked on exit - not only the IdP login Orphaned machine access

Yes Partial No

Non-human and AI identities

Service accounts and API keys have named human owners No "shared" or "nobody"

Yes Partial No

You know how many AI agents / bots have production credentials Even a rough count counts

Yes Partial No

AI / automation tokens are scoped least-privilege - not admin by default Jira, Salesforce, Slack bots

Yes Partial No

You have a quarterly review of non-human identities Same cadence as privileged humans

Yes Partial No

Request a time

Preferred date

Preferred time

Message (optional)

How should we reach you?

Email for session link Phone for direct call Either works

Email for session link

Work email preferred

Phone for direct call (optional unless you prefer phone)

Name (optional)

Walk your answers with us

Request a time

Request received