AgentsUser Access Review Automator
Search or run…CtrlK
SOCUser Access Review AutomatorSwitch
SOC 2 · Pass/fail verdict SOC-019 P1
Checks
CC6.2 · CC6.3 · 2 controls
Full scope
What auditors expect5 of 5 covered
CC6.2HighCovered
New user access is authorised before it is granted
hr-joiners-q3-2026.xlsx (covering)
CC6.2MediumCovered
Leavers are removed within the policy window
hr-leavers-q3-2026.xlsx (covering)
CC6.3HighCovered
Privileged access is restricted and reviewed
idp-users-export-2026-09.csv (covering)
CC6.3MediumCovered
Access is recertified each quarter
access-review-policy.pdf (covering)
CC6.3LowCovered
Review results are retained
Evidence4 files · Ready
- idp-users-export-2026-09.csv86 KBReady
- hr-joiners-q3-2026.xlsx38 KBReady
- hr-leavers-q3-2026.xlsx41 KBReady
- access-review-policy.pdf1.2 MBReady
SOC 2 · 2 controls · 4 filesUnlimited agent runs
Completed in 1:08Ctrl↵Run again
Signed off by your certified reviewer · AAP-000000 · 09:42
Export unlocked. The signed result is kept with the run.
Quarterly access review: CC6.2, CC6.3, verified
The run checked 412 accounts against CC6.2 and CC6.3. Joiners and leavers pass; privileged access fails on 3 dormant admin accounts. A named, certified reviewer approved the result for release.
All 4Fail 1Partial 1Unverifiable 0Pass 2
| Control | Result | Rationale | Evidence |
|---|---|---|---|
| CC6.2 | Pass | All 14 joiners provisioned against an approved ticket. | hr-joiners-q3-2026.xlsx |
| CC6.2 | Pass | Leavers removed within 2 business days. | hr-leavers-q3-2026.xlsx |
| CC6.3 | Fail | 3 dormant admin accounts, no sign-in for 90+ days. | idp-users-export-2026-09.csv rows 88, 141, 307 |
| CC6.3 | Partial | Quarterly recertification evidenced for 2 of 3 core banking roles. | access-review-policy.pdf §4.2 |
Next step: attach more evidence for CC6.3 and run again.
How we handle your information is explained in the Website Privacy Notice.