Technical controls automate the revocation of supplier access and verify that no residual access remains
Automating supplier access revocation and technically confirming nothing residual remains applies A.5.16's lifecycle discipline to non-employee identities, not only staff accounts.
Automating supplier access revocation and technically confirming nothing residual remains closes the same gap A.5.18 targets for employee offboarding, applied to vendors.