Account Lifecycle Starter Kit

Identity governance does not start with software. It starts with a leaver checklist that actually removes everything, an access request that someone actually approves, and a review that actually happens. This kit gives you all nine, ready to use this week.

The leaver checklist goes well beyond disabling an account: it covers session and token revocation, MFA methods, forwarding rules, local-account applications, shared passwords the leaver knew, and the accounts and subscriptions they owned. The mover checklist makes new access replace old access instead of adding to it. The review forms cover privileged, service and dormant accounts on the cadences auditors expect.

A starter Excel register adds a system list with owners, an account inventory that flags dormant, unowned, expired, shared and privileged-without-MFA accounts automatically, and a dormant account review log.

What is included

1. Joiner Checklist

2. Mover Checklist

3. Leaver Checklist

4. Access Request Form

5. Access Approval Record

6. Account Review Checklist

7. Privileged Account Review Form

8. Service Account Review Form

9. Dormant Account Review Form

10. Account Lifecycle Starter Register (Excel) and Starter Kit Guide (PDF)

Who it is for

IT managers and directors, system administrators, security engineers and analysts, compliance and risk managers, and MSP teams at organizations of roughly 25 to 500 people that run Microsoft 365, Google Workspace or similar platforms but have no formal identity governance process.

Formats

9 Word forms, Excel register, PDF guide.

License

License. Your purchase grants one organization a perpetual, non-exclusive license to use, copy, and modify these materials for its own internal security program, including sharing completed questionnaires and contract exhibits with its own vendors. You may not resell, sublicense, or redistribute the templates themselves, in original or modified form, as a product. Consultants and managed service providers who want to use the materials across multiple client organizations need a practitioner license; contact cyberauctoritas.com.

Disclaimer

This material is provided for general information and internal program building. It is not legal advice and does not certify compliance with any law, regulation, or framework. Contract language must be reviewed by qualified counsel before use. Adapt every document to your organization, your risk tolerance, and your obligations.