Access Control in Practice: Onboarding, Offboarding, and the Gap in Between

Access control is the most operationally active security domain in any organization. Every new hire, every role change, every contractor engagement, every termination is an access control event. And unlike perimeter security or endpoint protection, access control fails gradually and quietly — through accounts that linger after termination, through privileges that accumulate as people change roles, through vendor access that was granted for a project and never revoked.

This course covers the full identity lifecycle from a practical operational perspective. It explains the foundational concepts — least privilege, role-based access, separation of duties — and then walks through how those concepts are applied (or fail to be applied) at each stage of the lifecycle: onboarding, internal transitions, and offboarding. It also addresses the technical controls that make access management scalable — directory services, single sign-on, multi-factor authentication — and the specific challenges of third-party and contractor access, which most organizations manage far less rigorously than employee access.

Whether you are an IT administrator implementing access controls, a security professional auditing them, a manager responsible for requesting and approving access, or a business leader who wants to understand the organizational risk that poorly managed access creates, this course gives you the operational framework to improve what you have and defend it when asked.

Who This Is For

• IT administrators and security teams managing user provisioning and deprovisioning processes
• HR and operations leaders who own the onboarding and offboarding workflow
• Organizations that have discovered accounts still active after an employee departure
• Compliance and audit teams addressing access control findings from assessments or audits