Exact public version
access-lifecycle v1
Use when preparing or running a user access review, checking that leavers lost their access, finding orphaned or ownerless service accounts, answering an auditor's access-control request for SOC 2, ISO 27001, PCI DSS, HIPAA or NIST 800-53, or checking whether a finished review campaign will hold up. Diffs the HR roster against account exports, tests the campaign for coverage, self-review, unremoved revokes and rubber-stamping, and maps every exception to the controls it breaks.
cf147ecc4ac26955e7e432f373026997b20f623cb66f88b8b9805f23e6aa59bdPackage contents
Manifest
Use when preparing or running a user access review, checking that leavers lost their access, finding orphaned or ownerless service accounts, answering an auditor's access-control request for SOC 2, ISO 27001, PCI DSS, HIPAA or NIST 800-53, or checking whether a finished review campaign will hold up. Diffs the HR roster against account exports, tests the campaign for coverage, self-review, unremoved revokes and rubber-stamping, and maps every exception to the controls it breaks.
4b7875f6b8175d39c27dee3b231595cd6df5b0858eea69c421b1d0d55b1175d4- SKILL.md5,835 bytes
- assets/access_review_signoff.md1,522 bytes
- assets/accounts.example.csv742 bytes
- assets/campaign.example.csv591 bytes
- assets/hr_roster.example.csv428 bytes
- references/access_review_campaigns.md4,546 bytes
- references/control_crosswalk.md3,515 bytes
- references/joiner_mover_leaver_standards.md5,468 bytes
- scripts/access_diff.py17,329 bytes
- scripts/access_review_campaign.py16,073 bytes
- scripts/control_evidence_mapper.py13,029 bytes