•Line manager authorisation for new accounts.
•A process that clarifies the level of access required and ensures an adequate level of segregation of duties.
•A process that ensures that accounts for leaving staff are removed no later than the last date of employment.