When employees leave a business or change roles, their accounts may not always be removed or updated correctly. Contractors, temporary workers and external suppliers can also retain access longer than necessary if permissions are not reviewed.
Unused accounts can become a security weakness, particularly if they still have access to email, business files or administrative systems. Regularly reviewing user accounts, disabling those that are no longer required and applying appropriate access permissions can help reduce the risk of unauthorised access.
