Implement corrective action
TSK-0975
-
Last updated
Done
Owner
Sam de VriesAssignee
Lotte van DijkCompleted by
Lotte van DijkRecorded date
Correct recorded date
Created by
Sam de VriesDue
8/12/2026Source
Corrective actionAbout this Finding
FND-002 — Leavers' accounts are disabled later than the 24-hour targetThe audit compared the leaver list of the last two quarters with the moments the accounts were disabled. Several accounts stayed active for two or three working days after the last day, because the notice from HR reached the service desk only at the end of the week. The Access Control Policy sets a target of 24 hours, and the audit counted the late accounts as a gap in that target.