{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:16938047ff0802214480433fbaa4f58aa66b270ca388b9d30d02736ad190c4c1","slug":"controls-joiner-mover-leaver","url":"/assets/agent_workflow-controls-joiner-mover-leaver-8b5b0efb.f613fc5caf56b1d0.json"},"kind":"record","record":{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"canonicalUrl":"https://workflow-library.com/all/?w=controls-joiner-mover-leaver","description":"Run one instance per HR-triggered joiner, mover, or leaver event as a decision-routed access-lifecycle control that enriches the EXISTING Control item for JML / user-access provisioning-deprovisioning (control library, domains=access_control_identity, framework nist-800-53 + iso-27001) - attach the instance to that control, never create a duplicate. Consume the authoritative HR event record from the external HR system of record (the trigger): classify the event, then provision role-based access, adjust with SoD checks on transfer, or evidence timely removal on exit, and file the named audit-ready access-lifecycle evidence package before closing. In scope: identity-provider, directory, HR-system, ERP, and connected-SaaS entitlements for the affected worker. Out of scope: HR record creation itself, physical-security badge policy, and system-owner entitlement design. The run is terminal - no upstream or downstream AssureSwarm workflow: it starts from the external HR event and ends at the archived evidence package attached to the Control item. The anchor Control links (item relationship) to the access Risk it mitigates.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=controls-joiner-mover-leaver","capabilities":[],"controls":["UC-ACCESS-01","UC-HR-03","UC-ACCESS-03","UC-HR-06","UC-ASSET-07","UC-GOV-08"],"domains":["controls"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:16938047ff0802214480433fbaa4f58aa66b270ca388b9d30d02736ad190c4c1","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:controls-joiner-mover-leaver","standards":["nist-800-53","iso-27001"],"teams":["it","hr"]},"id":"wf:C19","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AC19","slug":"controls-joiner-mover-leaver","sourceIds":["aiuc-1","iso-27001","nist-800-53","nist-ai-agent-identity","nist-csf-2","pci-dss","soc1","soc2","sox"],"sourceUrl":null,"title":"Joiner-Mover-Leaver Access Lifecycle","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:384f2b698a5b77da918ec446d11f2c6e1752d673f729062ae90db8cb0495f8d3","properties":{},"sourceDetailPath":"/data/v1/records/wf-c19-ef930979.json","sourceId":"wf:C19","targetDetailPath":"/data/v1/records/uc-uc-hr-03-1f58d8f9.json","targetId":"uc:UC-HR-03","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7e794f4b48a1dfeac379283c9c406cbae1a95a673eba17b347259c26bab28955","properties":{},"sourceDetailPath":"/data/v1/records/wf-c19-ef930979.json","sourceId":"wf:C19","targetDetailPath":"/data/v1/records/uc-uc-gov-08-187d37c0.json","targetId":"uc:UC-GOV-08","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d5f7dda6e5271d0b3bc7a0474df05ff2a095f29cb8cf032d0e4f06082925351e","properties":{},"sourceDetailPath":"/data/v1/records/wf-c19-ef930979.json","sourceId":"wf:C19","targetDetailPath":"/data/v1/records/uc-uc-hr-06-36a1f4aa.json","targetId":"uc:UC-HR-06","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:df17c535a62a12ae5d9dfd3d71c4c53be0837fa1ecd2f9cc654a2d6f2a33c9b1","properties":{},"sourceDetailPath":"/data/v1/records/wf-c19-ef930979.json","sourceId":"wf:C19","targetDetailPath":"/data/v1/records/uc-uc-access-03-43eeb212.json","targetId":"uc:UC-ACCESS-03","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e996c568be2b504645b9883b8d3bbedd0d1e08c2973628b91896ba1da22b93af","properties":{},"sourceDetailPath":"/data/v1/records/wf-c19-ef930979.json","sourceId":"wf:C19","targetDetailPath":"/data/v1/records/uc-uc-asset-07-5039208b.json","targetId":"uc:UC-ASSET-07","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fd4c9b938510f25e549bed52a8a7af3b21b9ec31b50694e37bc24c2a025e168c","properties":{},"sourceDetailPath":"/data/v1/records/wf-c19-ef930979.json","sourceId":"wf:C19","targetDetailPath":"/data/v1/records/uc-uc-access-01-1e70b922.json","targetId":"uc:UC-ACCESS-01","type":"operates"}],"schemaVersion":1}