User Provisioning
User provisioning is the process of creating, updating and removing user accounts and their entitlements across systems, ideally driven automatically by changes in an authoritative HR source.
What is User Provisioning?
Definition
User Provisioning is the process of creating, updating and eventually removing user accounts and their entitlements across every system a person needs — and doing so as their role changes, not only on their first day. Done manually it fails predictably in one direction: accounts get created promptly and removed late or never, which is how organisations accumulate live credentials belonging to people who left years ago. In cybersecurity terms automated provisioning driven from an authoritative HR source is what makes deprovisioning as reliable as provisioning, and deprovisioning is the half that matters after an incident.
Role in cybersecurity
User Provisioning plays an important role in building organizational resilience against cyber threats. Implementing appropriate mechanisms in this area is required by regulations such as NIS2, DORA and ISO 27001.