Leavers' accounts are disabled later than the 24-hour target

The audit compared the leaver list of the last two quarters with the moments the accounts were disabled. Several accounts stayed active for two or three working days after the last day, because the notice from HR reached the service desk only at the end of the week. The Access Control Policy sets a target of 24 hours, and the audit counted the late accounts as a gap in that target.