CC6.2

Access Provisioning & Removal

SOC 2 · Security

Critical gap

AI explanation

Two accounts belonging to former employees still appear in the GitHub organization more than 30 days after their offboarding date in the HR directory.

Remediation

1Remove the two stale GitHub accounts
2Link offboarding tickets to access removal
3Enable quarterly access reviews
4Re-run automated test

Evidence

GitHub organization members
Employee directory export
Offboarding checklist

Open evidence library →

Affected systems

GitHubGoogle Workspace