Mechanisms exist to revoke user access rights in a timely manner, upon termination of employment or contract.
Does the organization revoke user access rights in a timely manner, upon termination of employment or contract?