Procedure
Identity Management Procedure
This procedure defines the processes for managing digital identities throughout their lifecycle: creation, maintenance, authentication configuration, privileged access management, and termination. It ensures that every identity within the organization's systems is unique, accountable, appropriately privileged, and subject to regular review.
- Type
- Procedure
- Version
- 2.0.8
- Date
- 2026-10-13
- Owner
- Chief Information Security Officer
- Approving authority
- Chief Information Officer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material platform or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Roles and responsibilities
- 1. Identity creation
- 2. Authentication standards
- 3. Privileged identity management
- 4. Identity maintenance
- 5. Access certification
- 6. Identity termination
- Framework alignment
Frameworks it maps to
- ISO/IEC 27001:2022
- ISO/IEC 27002:2022
- ISO/IEC 24760 (Parts 1 to 3, 2025)
- NIST SP 800-53 Rev. 5
- NIST SP 800-63A-4
- NIST SP 800-207
- COBIT 2019
- CSA CCM v4.1
Related documents
- Access Control Proceduresecurity
- IT Onboarding and Offboarding Proceduresecurity
- Privileged Access Management Standardsecurity
- Enterprise Governance and Risk Management Policyrisk
Next
All Documents