Leavers who still hold keys
Joiner–mover–leaver tickets look complete until you sample live access — patterns we see when exits fail on finance platforms.
Exit tickets often close when HR marks the last day. Identity systems may lag: VPN profiles linger, console roles remain, and API keys sit in deployment vaults under the leaver’s name.
In joiner–mover–leaver assessments we sample a recent exit cohort against live access state. The finding is rarely “no process.” It is “process and state disagree.” That disagreement is what regulators and diligence teams notice.
Fixing it usually means tighter ownership between HR queues and identity actions, plus a short residual-privilege check before the ticket can close. It is unglamorous control work — and it removes a quiet path to customer data after someone has left.