Evidence Flows

workflow

Joiner-Mover-Leaver Access Lifecycle

Run one instance per HR-triggered joiner, mover, or leaver event as a decision-routed access-lifecycle control that enriches the EXISTING Control item for JML / user-access provisioning-deprovisioning (control library, domains=access_control_identity, framework nist-800-53 + iso-27001) - attach the instance to that control, never create a duplicate. Consume the authoritative HR event record from the external HR system of record (the trigger): classify the event, then provision role-based access, adjust with SoD checks on transfer, or evidence timely removal on exit, and file the named audit-ready access-lifecycle evidence package before closing. In scope: identity-provider, directory, HR-system, ERP, and connected-SaaS entitlements for the affected worker. Out of scope: HR record creation itself, physical-security badge policy, and system-owner entitlement design. The run is terminal - no upstream or downstream AssureSwarm workflow: it starts from the external HR event and ends at the archived evidence package attached to the Control item. The anchor Control links (item relationship) to the access Risk it mitigates.

In catalog since 2026-09-17T22:28:00Z · Last changed 2026-10-04T21:48:26Z (791ff2dd3a45)

Record JSON · Open in map · Data retrieval guide

Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.

Attributes

domain
controls
department
it
lineOfDefense
operate

Details

teams
  • it
  • hr
domains
  • controls
standards
  • nist-800-53
  • iso-27001
sourceTemplateId
workflow-library:controls-joiner-mover-leaver
releaseId
sha256:4c5162b1708e26f6e979e2390f348fd2daae0958e9e7a29f6e52bce91095b815
canonicalUrl
https://evidenceflows.com/workflows/all/?w=controls-joiner-mover-leaver
capabilities
    mappingStatus
    mapped
    lineOfDefense
    operate
    controls
    • UC-ACCESS-01
    • UC-HR-03
    • UC-ACCESS-03
    • UC-HR-06
    • UC-ASSET-07
    • UC-GOV-08
    roleIntegrity
    activityCount
    0
    ermPhases
      lineRoles
        serviceModes
          warnings

            Source

            No record-specific source URL is provided.

            Download workflow template · Release: sha256:4c5162b1708e26f6e979e2390f348fd2daae0958e9e7a29f6e52bce91095b815

            Connections