Briefly describe your employee life cycle process – account provisioning, access removal, password policy, what controls are implemented for employees with potential access to customer data?

For user provisioning and deprovision we automate this process with integration from our HR system to our IdP (Okta). We follow NIST guidelines for password policy and use Multi-factor authentication (MFA). We utilize role-based access control (RBAC) for maintaining limited access to production environments.