Public skill
access-lifecycle
Use when preparing or running a user access review, checking that leavers lost their access, finding orphaned or ownerless service accounts, answering an auditor's access-control request for SOC 2, ISO 27001, PCI DSS, HIPAA or NIST 800-53, or checking whether a finished review campaign will hold up. Diffs the HR roster against account exports, tests the campaign for coverage, self-review, unremoved revokes and rubber-stamping, and maps every exception to the controls it breaks.
Package contents
Manifest
Use when preparing or running a user access review, checking that leavers lost their access, finding orphaned or ownerless service accounts, answering an auditor's access-control request for SOC 2, ISO 27001, PCI DSS, HIPAA or NIST 800-53, or checking whether a finished review campaign will hold up. Diffs the HR roster against account exports, tests the campaign for coverage, self-review, unremoved revokes and rubber-stamping, and maps every exception to the controls it breaks.
4b7875f6b8175d39c27dee3b231595cd6df5b0858eea69c421b1d0d55b1175d4- SKILL.md5,835 bytes
- assets/access_review_signoff.md1,522 bytes
- assets/accounts.example.csv742 bytes
- assets/campaign.example.csv591 bytes
- assets/hr_roster.example.csv428 bytes
- references/access_review_campaigns.md4,546 bytes
- references/control_crosswalk.md3,515 bytes
- references/joiner_mover_leaver_standards.md5,468 bytes
- scripts/access_diff.py17,329 bytes
- scripts/access_review_campaign.py16,073 bytes
- scripts/control_evidence_mapper.py13,029 bytes
Release history