Enforce joiner, mover and leaver with segregation of duties

Information governance, information security and data protection officer: Enforce joiner, mover and leaver with segregation of duties. Starts when: A human resources event. Steps: Event raised; Access changes flow automatically; Segregation rules checked; Exceptions logged and resolved. Done when: Every access change traces to an HR event and exceptions are resolved within the stated window. Rules that apply: Cyber criterion 4.1 "Access follows least privilege, with a joiner, mover and leaver process".