Re: Account de-provisioning process/policies

[Mandi Witkovsky <witkovsm () PFW EDU>]

For all accounts, once you lose your final affiliation with the institution, the deprovisioning process begins.  The 
account is disabled for a period of 4 weeks and then deleted.  The process for losing affiliations is what differs.  
Students lose it when their record goes inactive-essentially 2 semesters after they stop taking classes.  Employees 
lose it when they are separated.  Guests when their sponsor says they no longer need the access.  The only exception is 
Limited Term Lecturers.  Many teach only alternating semesters, so to avoid an endless cycle of provisioning and 
reprovisioning, we have a grace period.  If the grace period is over and they haven't come back as some other 
affiliation, deprovisioning begins.

mandi

Mandi Witkovsky
Manager of Security and Identity
Information Technology Services
Purdue University Fort Wayne
witkovsm () pfw edu<mailto:witkovsm () pfw edu>



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Fugett, Julie C
Sent: Tuesday, August 27, 2019 11:43 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Account de-provisioning process/policies

Colleagues-

We are examining our account de-provisioning practices at KU. Currently we have a one size fits all approach that has 
not aged particularly well. I am interested to hear how you all manage disabling user accounts after a person leaves 
your organization. Do you treat students/faculty/staff/adjuncts/other the same, or do different types of users have 
different de-provision dates based on their role?

If you have policies that govern your de-provisioning process(es), I would love to see those too if you are willing to 
share.

Thanks,
Julie

______________________________________
Julie C. Fugett, CISSP
Chief Information Security Officer
KU Information Technology
The University of Kansas
Email jcf () ku edu<mailto:jcf () ku edu>
Mobile  +1 785 691 9023
Office +1 785 864 0490
She/Her/Hers

Sign up for Duo Multifactor Authentication today! https://myidentity.ku.edu/multifactor/
Read the FAQ at https://duo.ku.edu<https://duo.ku.edu/>


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community