Mover access is recertified on role change

When Darwinbox records a department or job change, access tied to the previous role is reviewed by the former manager and removed within 5 business days unless re-approved by the new manager.

Requirements

ISO-A.5.18 A.5.18 · Access rights

ISO-A.6.5 A.6.5 · Responsibilities after termination or change of employment

ITGC-AM-01 ITGC-AM-01 · Access provisioning and de-provisioning is authorized and timely

ITGC-SOD-01 ITGC-SOD-01 · Segregation of incompatible duties in business applications

RBI-ITGRCA-2023-7.1 RBI-ITGRCA-2023 §7.1 · Access control — least privilege, privileged access management, periodic review (RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices, 2023)

SOC2-CC6.2 CC6.2 · User registration and authorization prior to issuing credentials

SOC2-CC6.3 CC6.3 · Role-based access, least privilege and segregation of duties; access modification and removal

Policy

pol-access · Access Control Policy

Applications

Darwinbox HRMSMicrosoft Entra IDSAP S/4HANA

Third parties

—

Testing procedure

Continuous Monitoring HR-drift compares Darwinbox role to SAP/Entra entitlements and raises exceptions. Tests: Darwinbox HRMS: Role changes detected from HR feed; SAP S/4HANA: Previous-role SAP roles removed after move; Microsoft Entra ID: Previous-role groups removed after move. Frequency on-demand.