How many days until you disable inactive user accounts? How many days until you delete inactive user accounts?

Question

Answer

H+1 after user resign

Answer

I define my own policies based on their security requirements, compliance regulations, and risk management practices. These policies often consider factors such as the nature of the organization's business, the sensitivity of the data accessed by the user accounts, and the overall security posture.
The number of days before disabling or deleting inactive accounts can range from a few weeks to several months

Answer

We wait four to six weeks before deactivating inactive user accounts to offer people who have been away from work for a short while a chance to renew their accounts. To assist safeguard the security of the company, we erase them completely after 180 days.

Answer

4 weeks

Answer

If you are out on HR approved medical leave the account is locked as part of the process usually within a day. In Europe since many take 4+ weeks of vacation at once we allow 5 weeks. In the USA it’s 3 weeks. If the employee quits or is fired or laid off it’s disabled immediately.

How many days until you disable inactive user accounts? How many days until you delete inactive user accounts?

Content you might like

As a workflow management / Service desk / Help-Desk / Support center key stakeholder, do you consider this activity fully optimized within your company? If not, what would be the top 2 elements that could be improved the most according to you?

Do you plan to set up an AI ethics review committee?

If you had a magic wand - what's the #1 daily business challenge you'd eliminate?

How do you go about convincing your leadership/board to increase investment in security specifically for web apps? What's been effective, in your experience, for communicating why web application security is important?