<h3><span style=”font-weight: 400;”>What’s deprovisioning?</span></h3>
<span style=”font-weight: 400;”>Simply put, deprovisioning is the opposite of provisioning. While provisioning is carried out when an employee joins the organization, deprovisioning needs to be carried out when an employee exits. </span>

<span style=”font-weight: 400;”>Deprovisioning involves revoking the user’s access to the organization’s data, applications and devices. It is the final stage of the corporate user lifecycle that begins with on-boarding and provisioning.</span>
<h3><span style=”font-weight: 400;”>Why is it important?</span></h3>
<span style=”font-weight: 400;”>Provisioning plays an important role in an organization’s productivity by getting new users the access they require to perform their role in the company. </span>

<b>Deprovisioning, on the other hand, plays a critical role in security and compliance.</b><span style=”font-weight: 400;”> When an employee moves on, it is vital that they no longer have access to the organization’s data or applications, because this would leave the door open to misuse. </span>

<span style=”font-weight: 400;”>The consequences can range from data theft to malware insertion, leaks of confidential information to compliance violations. Each of these can have a major negative impact on the company’s finances as well as reputation.</span>
<h3><span style=”font-weight: 400;”>How does it work?</span></h3>
<span style=”font-weight: 400;”>Most organizations make use of multiple applications in their operations. Manually remembering to revoke access from a user when they exit the company can therefore be tedious, time consuming, and can easily result in human error as well.</span>

<span style=”font-weight: 400;”>A key requirement for an efficient and effective provisioning and deprovisioning process, therefore, is to bring control over access to all of the organization’s applications and data onto a single platform. This is typically achieved through the use of a Single Sign-On (SSO) solution – which is typically one of the major components of an Identity and Access Management solution.</span>

<span style=”font-weight: 400;”>With an SSO in place, the company’s admins can exercise control over user access from a single place, making the process fast, accurate and convenient. By removing the user’s account in one centralized dashboard, their access to all applications and data is then automatically revoked.</span>

<i><span style=”font-weight: 400;”>Akku is an enterprise identity and access management solution by CloudNow that helps companies manage the corporate user lifecycle more efficiently – from provisioning all the way to deprovisioning. Talk to us today to see how Akku could help your business address security and compliance issues arising from sub-optimal deprovisioning processes.</span></i>

Ananthasayanam Nallan Chakravarthy

Ananthasayanam is Executive Vice President – Global Sales at Akku, where he leads the company’s global go-to-market strategy, driving revenue growth and building long-term client relationships across industries. His focus is on expanding Akku into new markets, while strengthening strategic alliances and cultivating high-performance teams. Prior to joining Akku, he held senior leadership roles at Denodo, Oracle, Tectura, Ramco Systems, and other organizations, gaining extensive experience in sales management, business development, and enterprise technology across global markets.

Recent Posts

Building a Defensible Audit Evidence Package for Regulators | Akku

Introduction Every compliance audit, regardless of framework, arrives at the same point: the auditor requests evidence that specific controls operated…

1 day ago

DPDPA Data Principal Rights: What the Technical Infrastructure Behind Each Right Requires

Introduction DPDPA Chapters II and III establish six rights for Data Principals. Each right creates a corresponding technical obligation for…

2 days ago

GDPR Article 25: Data Protection by Design and IAM | Akku

Introduction GDPR Article 25 requires that data protection be built into system architecture by design and that data minimisation be…

2 weeks ago

ISO 27001 A.8.15: User Activity Logs and Authentication Logs Are Not the Same Control

Introduction ISO 27001:2022 Annex A.8.15 requires that logs recording user activities, exceptions, faults, and security events be produced, kept, and…

2 weeks ago

How to Build an Audit Evidence Package That Survives Regulatory Scrutiny

Introduction Every compliance audit, regardless of framework, arrives at the same point: the auditor requests evidence that specific controls operated…

2 weeks ago

SOC 2 CC6: Logical Access Controls and What IAM Must Deliver

Introduction SOC 2 CC6 is the Logical and Physical Access Controls criterion cluster and is where the majority of IAM-relevant…

2 weeks ago