Added access control procedures to access management section - access removal timeframe for review by PeopleOps
@BarbieGitLab I have updated our access control procedures and suggested a 3 day timeframe for the deprovisioning of access once the offboarding issue has been submitted.
In the case of a separation from the company, all access will be deprovisioned within 3 business days from the date on which the offboarding request is submitted unless otherwise specified.
Please review and OK if you are comfortable with this time frame. This amount of time has been audit-tested and validated in my previous experiences and I believe it sets us up for compliance with a security-approved and achievable control activity. @kathyw and I have discussed and she is comfortable with the removal expectation.
If you approve, please merge.
Thank you! Mel