Topic
Identity & access
Remove a departing employee's access across the connected systems, read each removal back, and keep the receipt for the auditor.
9 articles
Lead article
· 5 min read
CC6.2 is where first SOC 2 audits go sideways
Offboarding is the control growing companies often fail. Why a termination does not reach every system, what an auditor samples, and the evidence that holds up.
Archive
All Identity & access articles
- When an agent asks for more access, what should the buyer ask first?4 min
- Why service-account permissions don't fit agents7 min
- An Okta agent should explain the access before it changes anything4 min
- The lethal trifecta: where it actually lives6 min
- How do MCP permissions work when agents use company tools?4 min
- Why does my GitHub agent get 404 or resource not accessible errors?4 min
- Who should own the credentials an agent uses?4 min
- Sub-agent identity: inherit and narrow7 min