Sekit CSF · Identity & Access Management · Process
RCF-0089JML (joiner-mover-leaver)
HR and IT coordinate promptly when employment status changes
Mapping at a glance
RCF-0089JML (joiner-mover-leaver)Identity & Access Management · Process
A.5.18Access rightsISO/IEC 27001:2022 · Annex A controlsA.6.5Responsibilities after termination or change of employmentISO/IEC 27001:2022 · Annex A controlsPR.AA-01Identities and credentials managedNIST CSF 2.0PR.AA-02Identities proofed and boundNIST CSF 2.0PR.AA-05Access permissions managedNIST CSF 2.0
RCF-0089 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.18Access rightssupportsExecuting the joiner-mover-leaver flow reliably, so IT hears about every departure in time, is what stops A.5.18's revocation deadline from being missed in practice.A.6.5Responsibilities after termination or change of employmentsupportsThis process control executes the joiner-mover-leaver flow so IT learns about departures in time and access is cut by the last working day, the enforcement A.6.5 requires.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
PR.AA-01Identities and credentials managedPR.AA-02Identities proofed and boundPR.AA-05Access permissions managed
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Joiner-mover-leaver procedure
The process the company follows when someone joins, changes role, or leaves: how access and devices are granted and removed.
From the Sekit evidence catalog
This topic through the other lenses
All Identity & Access Management controls
Ask Sekura: “What evidence proves RCF-0089?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.