📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

People Security

Keep a register of joiners, leavers and background checks, and spot any leaver whose account is still switched on.

Where to find it
Compliance (GRC) › People Security
Who can use it
Anyone with a GRC role that can view compliance data; adding, editing, syncing and snapshots need a role that can edit; Export needs a role that can export
Plan
Compliance (GRC) platform
For
Everyone

What the page is for

Most compliance frameworks ask you to prove that new staff were onboarded properly, that people who left were offboarded and had their access removed, and that background checks were done where required. People Security keeps that register for you.

If your Microsoft 365 or Google Workspace directory is connected, Sync from directory fills the register for you: new accounts are added, names, job titles and departments are refreshed, and people who have gone from the directory are marked as leavers. If a leaver's account is still enabled, the row is flagged in red and an issue is raised for each one. Without a connected directory, you add people by hand.

When an auditor asks for proof, Snapshot to evidence saves the register as an encrypted spreadsheet against the personnel control it supports, where it waits for review like any other evidence.

What you see

The People Security page, with the header and actions, summary tiles, search and status filter, people table and person dialog numbered 1 to 5.
The People Security page. Numbers match the list below.
  1. Header and actions: the directory the register syncs from and when it last synced, plus Add a person, Sync from directory, Snapshot to evidence and Export.
  2. Summary tiles: Active people, Joiners without completed onboarding, Leavers without offboarding, Background checks pending and Leavers whose account is still enabled. Click a tile to filter the table.
  3. Search and Status filter: search by name, email or department, and show Everyone, Active or Leavers.
  4. People table: Person, Role, Status, Start, End, Account, Background check and On / offboarding, with quick buttons to record what is outstanding.
  5. Person dialog: opens when you click a name or Add a person.

How to sync from your directory

  1. Select Sync from directory.
  2. The Directory sync summary shows how many accounts were read, added, updated and marked as leavers.
  3. If any leaver still has an enabled account, the summary says so and an issue is raised for each one. Disable those accounts, then sync again to close the red flags.

How to add or edit a person

  1. Select Add a person, or click a person's name in the table.
  2. Fill in Email (new people only), Name, Job title, Department, Status, Start date and End date.
  3. Set Background check and Checked on if a check applies.
  4. Turn on Onboarding done or Offboarding done when those steps are complete.
  5. Select Save.

How to record onboarding, offboarding or a background check quickly

  1. Find the person in the table. Outstanding items show as buttons at the end of the row: Onboarding done, Offboarding done or Check complete.
  2. Click the button and confirm with Record it. Today's date is recorded.

How to save the register as evidence

  1. Select Snapshot to evidence.
  2. Search for the personnel control the register supports (for example termination, onboarding or screening) and click it.
  3. Select Save snapshot.
  4. Use Open the evidence in the confirmation to review the new evidence item.

How to export the register

  1. Select Export.
  2. A spreadsheet of the register downloads, named with your company and today's date.

Tips

  • Start with the red Leavers whose account is still enabled tile. These rows are highlighted in red in the table and are the most important to fix.
  • A leaver with no end date is given today's date when you save.
  • For people synced from a directory, name, job title and department are refreshed on every sync, so edit those in the directory rather than here.
  • The Account column shows "Not in directory" for people you added by hand.

Troubleshooting

  • "No directory is connected, so people are added by hand." Connect Microsoft 365 or Google Workspace to sync automatically, or use Add a person.
  • "Nobody in the register yet." Select Sync from directory or add people by hand.
  • "Evidence storage is not configured on this server." Snapshots cannot be saved until evidence storage is available. Contact your administrator or support.
  • "Choose a control." Pick a control from the list in the snapshot dialog before saving.
  • I don't see the buttons. Adding, syncing and snapshots need a GRC role that can edit; Export needs a role that can export.

Task guides that use this page

Still need help?

Search the support centre, or contact our support team and tell us which page you were on.

Names, companies, devices and figures in the pictures are examples. Other product and company names are trademarks of their respective owners.

We use privacy-friendly, cookieless analytics to count visits, and one cookie to run our live chat. Both load only if you accept. We do not use advertising trackers, and we do not profile you across other websites. The essential cookies that keep the site working are always on. See our privacy policy.