Audit exportReport incident
DEMO
You’re viewing AuditPilot with seeded data for Cedar Creek Family Medicine. Add Clerk + Neon environment variables to enable real multi-tenant data.
All controls

Access Control · AP-AC-004

Departing workforce access revoked within 24 hours

When someone leaves, their accounts (M365, EHR, VPN, badge access) are disabled within one business day.

PassingCritical
Remediation guidance

Document an offboarding checklist. AuditPilot's template covers M365, EHR, VPN, badge access, and physical key recovery.

Status
Last checked5 hours ago
Next check dueApr 24, 2026
Weight20
Severitycritical
Framework requirements satisfied
HIPAA
§164.308(a)(3)(ii)(C)

Termination Procedures

SOC 2
CC6.4

Termination

HITRUST
02.i

Removal of Access Rights

Linked evidence (0)
Add evidence
No evidence yet. Upload a screenshot, report, or signed document to mark this control as proven.