Table 4.
Employee lifecycle policies of a Cloud provider platform.
| Policy | Brief overview |
| Account provisioning | The Cloud provider itself assumes the responsibility of provisioning employees and contractor access. This access to the resources hosted in the Cloud platform must be explicitly approved by the owner or data manager. |
| Account review | Every access account is reviewed in Cloud platforms every 90 days. |
| Access removal | Every employee’s access account is automatically revoked when it is concluded. |
| Password policy | Access to the platform is performed by user IDs and passwords to authenticate users to services, resources, and devices, as well as to authorize the appropriate level of access to each user. |