When staff/students/researchers leave the University or change status, there is currently no formal process to remove their access to financial systems.  This could potentially result in unauthorized people gaining access to confidential information or submitting financial claims.

This proposal is to review & enhance the process of de-provisioning user accounts so that access to financial systems is withdrawn in a timely manner

External Auditors raised this as a management letter concern when auditing the financial accounts last year

Architecture group have also raised this as a concern

Finance management has committed to Audit & Risk that action will be taken on this matter

Information security is a key theme for ISG