To establish the guidelines in the conduction of access rights review with consideration to employment changes and/or grant of special privileged access rights.
The scope of this procedure covers all Infinit-O employees and visitors who are given access rights to any information processing facilities in the organization.
3.1 Access right is granted to a new hire or to a team member who transfers to another account as indicated in the HR New Hire Checklist or Transferee Checklist.3.2 Corporate access right is given to selected leaders of projects and departments. These selected leaders are delegated certain administrative privileges and are able to provide or establish new rights for other users as needed and with approval of immediate head.3.3 Disabling of access is made when one is placed on suspension or leave of absence. The access can be reactivated upon return to work.3.4 Revocation is implemented on the last day of a separated team member.3.5 Leaders Circle must ensure that temporary special access rights to visitors are revoked as soon as the visitors’ official visit to the company ends.
4.1 IT Team reviews the access rights at least once a year or during the Asset Register and Statement of Applicability reviews.4.2 HR, IT and Finance team implements new guidelines or changes on access grant and/or revocation when necessary.
As necessary.
6.1 ISO Team6.2 CSG6.3 Support Services Team
7.1 ISO Team reviews the Access Control List (ACL) that is maintained by the IT Team. Changes in employment status such as promotions, transfers to different teams, demotion or separation must be considered in all reviews.7.2 ISO Team reviews existing authorizations on special privileged access rights and determines if there is a need to continue the granted access right.7.3 Refer to CP-IT-0101 for other guidelines.
CP-IT-0101
ACLNew Hire ChecklistTransferee ChecklistEmails from Management Team