Identity and Endpoint Protection
Employee devices and accounts provide access to sensitive records. Review MFA, patching, endpoint protection, and permissions, then define which configurations and monitoring activities belong in the agreed service scope. Ask how new hires, departing employees, and changes to job responsibilities are reflected in account permissions and maintenance tasks. Document authorization and escalation responsibilities.
