Re: [External] [SECURITY] Faculty / Staff Account De-provisioning

[Ben Marsden <bmarsden () SMITH EDU>]

I *wish* we deprovisioned accounts by default on the day of termination.
For planned, amicable separations,  the account is not actually disabled
until 30 days after their official termination date (although we no longer
say this in the automated message that goes out prior to their termination
date).   For some unplanned, and for all "non-amicable" terminations,  the
account is disabled immediately upon termination.    Faculty who are
retiring retain their account for life,  faculty who are leaving for
another job are treated as above;  extension requests are usually granted.

Yeah, "cleanup needed in IAM aisle 16...."

-- Ben

On Fri, Jul 24, 2020 at 10:54 AM Gregg, Christopher S. <csgregg () stthomas edu>
wrote:

> We deprovision staff accounts the day of termination.  Faculty accounts
> are terminated 30 days after the HR termination date (which gets
> complicated for adjunct faculty).  We don’t provide alumni accounts.
>
>
>
> We have a separate immediate, manual process for involuntary terminations,
> and other similar non-“good terms” cases.
>
>
>
> Thanks,
>
>
>
> Chris
>
>
>
>
>
> *Chris Gregg*
> Associate Vice President of Information Security & Risk Management, CISO
> Innovation & Technology Services (ITS)
> csgregg () stthomas edu
> p 1 (651) 962-6265
> *University of St. Thomas* | stthomas.edu <https://www.stthomas.edu/>
>
>
>
>
>
>
>
> *From:* The EDUCAUSE Security Community Group Listserv <
> SECURITY () LISTSERV EDUCAUSE EDU> *On Behalf Of *Kevin Ledbetter
> *Sent:* Friday, July 24, 2020 9:37 AM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU
> *Subject:* [External] [SECURITY] Faculty / Staff Account De-provisioning
>
>
>
> We are currently reviewing account de-provisioning policies regarding
> faculty and staff that leave the university on good terms and are
> interested in learning more about how other institutions handle this
> situation.
> When a faculty/staff member leaves your institution’s employment, what is
> the timing in which access to their email account is revoked?  Is access
> revoked immediately or is there a grace period afforded to the former
> employee? If a grace period exists, how long is it? Are faculty and staff
> members treated the same.  If the former employee is an alum, are there
> special considerations made?
>
>
>
> Kevin
>
> --
>
> *Kevin Ledbetter*
>
> *Systems Security Administrator Office of Information Technology*
>
> 1700 Chapel Drive
> Valparaiso, IN 46383
> 219.464.6191
>
> Staff Employee Advocacy Council
>
> Kevin.Ledbetter () valpo edu
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> <https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccsgregg%40STTHOMAS.EDU%7Ce99053402a3f488e81ba08d82fdf1c47%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C1%7C637311982580699592&sdata=9qyMRN2npnRLaT3YAG3qu9D6V8c8ALE3LrvwJtJ%2Bllw%3D&reserved=0>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community


-- 
[}--> BEWARE of links and attachments in email!   *  Stop, Think before you
click *
============================================
Ben Marsden : Information Security Director, CISSP
ITS, 201 Stoddard Hall, Smith College, Northampton, MA 01063
---------------------------------------------------------------------
=-->

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community