6.1: Establish an Access Granting Process
=========================================================
Establish and follow a process, preferably automated, for granting access to enterprise assets upon new hire, rights grant, or role change of a user.

.. list-table::
	:header-rows: 1

	* - Asset Type
	  - Security Function
	  - Implementation Groups
	* - Users
	  - Protect
	  - 1, 2, 3

Dependencies
------------
* None

Inputs
------
#. Enterprise process for granting access to enterprise assets

Operations
----------
#. Check to see if Input 1 exists
	#. If the enterprise has an access granting process, M1 = 1
	#. If the enterprise does not have an access granting process, M1 = 0
#. Using Input 1, check to see if the process, includes at a minimum, a way to grant access upon new hire, rights grat, and role change of a user.
	#. For each element that is include, assign a value of 1. Sum the value of the elemnts included. (M2)

Measures
--------
* M1 = Output of Operation 1
* M2 = Count of elements included in the access granting process

Metrics
-------
If M1 is 0, the safeguard receives a failing score. The other metric don't apply.

Completeness of Process
^^^^^^^^^^^^^^^^^^^^^^^
.. list-table::

	* - **Metric**
	  - | The percentage of elements included in the access granting process
	* - **Calculation**
	  - :code:`M2 / 3`

.. history
.. authors
.. license