June 2019: Credit Union Cybersecurity Tip of the Month

The user provisioning process is an integral part of your credit union’s security. It can often be considered an IT problem, but it is an area that affects the security and operation of the entire credit union.  User provisioning encompasses not only account creation at hire but also includes the entire lifecycle management of user accounts.  A strong user provisioning program addresses account creation at hire, modifications during role changes, account removal, and periodic auditing of accounts.

Account provisioning should be based on the principle of least privilege; granting only those privileges and access that an employee needs to accomplish their work and no more.  At a minimum, a good account provisioning program should include the following elements.

1. Well defined user request forms that make it easy for managers to request required access that clearly translates to the roles that IT will assign the users to in the credit union’s systems.

 

continue reading »