Understanding personnel statuses

Overview

Secureframe uses personnel statuses for you to understand the state of the personnel you’ve onboarded onto the platform and any actions that you as the admin, or the personnel needs to take within the platform. 

Status Definition Action required by admin Action required by personnel
Uncategorized Before personnel can be invited to Secureframe, they must be categorized as employee or contractor Categorize personnel N/A
Not Invited This personnel has not been invited to the Secureframe employee dashboard to complete their tasks. Invite personnel  N/A
Incomplete tasks This status is displayed when the personnel has not completed one or more of the following tasks (as applicable):
  • Accepted all required policies
  • Completed necessary training
  • Background check
  • Secureframe agent
Remind personnel Complete employee dashboard tasks
Overdue tasks This status is displayed when the personnel has not completed one or more of the following tasks before the required time(as applicable):
  • Accepted all required policies
  • Completed necessary training
  • Background check
  • Secureframe agent
Remind personnel Complete employee dashboard tasks
All tasks completed All tasks completed by personnel and admin N/A N/A
Offboarded This personnel has been detected as terminated in the system in one or more integrations connected to Secureframe Mark as Inactive N/A
Active Account(s)

We detected this user has active accounts. Please ensure these accounts are deactivated.

Review Associated Accounts N/A

Categorize personnel

Personnel must be categorized before they can be onboarded to Secureframe. In order to categorize personnel:

  • Navigate to the personnel page
  • Click on “Categorize Personnel” under the column header “Type” for any uncategorized personnel
  • Choose a category for personnel:
    • In scope employee
    • In scope contractor
    • Out of scope contractor

  • Alternatively, you can also bulk categorize personnel by: 
    • Multi-select personnel 
    • Click “Property”
    • Clicking “edit type”
    • Choose employee or contractor
    • Click “Apply to personnel”

For more information on how to determine if the personnel is in or out of audit scope, please read this article

If the record in the personnel table is not an employee or contractor, you can categorize them as follows:

  • Non personnel - we recommend using the Non Personnel category for any email addresses used as aliases and for every email address that does not fall under the Employee and Contract types, such as service accounts.
  • Auditor - mark auditors who have access the platform

To categorize as non personnel for auditor, follow the steps below:

  • Click three dot menu on the right hand side of the record
  • Click mark as non personnel or mark as auditor

Invite Personnel

One the personnel is categorized, you can invite the personnel by following the steps below:

  • Navigate to the Personnel page
  • Click not invited status
  • Click invite

To bulk invite personnel:

  • Multi-select the personnel you want to invite
  • Click invite in the bulk action bar at the bottom

Remind Personnel

If the personnel has incomplete or overdue tasks, you can remind personnel by clicking on the status, e.g. either incomplete tasks or overdue tasks and clicking the bell icon.

Mark offboarded personnel as inactive

When a personnel is in the “offboarded” status, it means that this person has been detected as terminated in the system in one or more integrations. Follow the steps below to address personnel with “offboarded” status:

  • Review the personnel by clicking on their name in personnel page
  • Click on the “Accounts” tab
  • Review the accounts that the user has access to, if there are any accounts that the offboarded personnel still has access to, ensure access is removed in source system

  • The next step is to mark this personnel as “Inactive” in Secureframe, to do so:
    • Click on the offboarded status
    • Click “Mark as Inactive”

    • Click “Mark as inactive” on the confirmation screen

    • You can also mark the personnel as Inactive by clicking on the three dot menu and then clicking “Mark as inactive”

Bulk change personnel to inactive

If you would like to bulk change personnel status for all offboarded personnel at once, follow the steps below:

  • Navigate to the Personnel page
  • Create a filter for Status is exactly offboarded
  • Click the check box to select all offboarded personnel
  • Click the three dot menu in the bulk action bar at the bottom of the screen
  • Click Mark as inactive

 

Preset filters - In Compliance, Medium Priority and High Priority

In order to assist you, Secureframe provides a list of preset filters on the personnel page to understand the state of compliance amongst your workforce. The three preset filter views can be found on the top of the personnel page next to the search bar. Below is a description of each of these preset filters:

Preset filter State of Personnel Admin action required:
In Compliance Personnel under “In Compliance” includes all in scope personnel who have:
  • Completed all relevant training
  • MFA set-up for system(s)
  • Accepted all relevant policies 
  • Secureframe agent is enabled (if applicable)
None
Medium Priority Personnel under medium priority includes all Active(e.g. current employed personnel) who are either:
  • Uncategorized
  • Not invited
  • Have Incomplete tasks (could include any of the following tasks being incomplete:
    • Completing all relevant training
    • Setting up MFA for system(s)
    • Accepting all relevant policies 
    • Enabling Secureframe agent (if applicable)

Categorize personnel

Invite Personnel

Remind Personnel

High Priority

Personnel under high priority includes Active (e.g. currently employed personnel) - who have overdue tasks e.g. a task that is past its due date, such as:

  • Completing all relevant training
  • Setting up MFA for system(s)
  • Accepting all relevant policies 
  • Enabling Secureframe agent (if applicable)

Personnel will change from Medium Priority flag to High Priority only if any of the specific tasks that the personnel has to complete is past its due date. Here is an example:


  • Jessica was onboarded on June 1 and has 30 days to complete new hire training
  • Jessica has completed all her tasks except for her new hire training which is due within 30 days of onboarding 
  • You view the personnel table on June 15 and Jessica has still not completed her new hire training, she will be flagged under “Medium Priority”
  • You view the personnel table on July 1st and Jessica still has not completed new hire training, she will be flagged as high priority because the new hire training is past its due date
Remind Personnel
High priority Personnel under high priority can also include - Inactive personnel who have an “offboarded” status Mark offboarded personnel as inactive

Frequently Asked Questions (FAQ)

If a employee is detected as Offboarded in Secureframe, is there anything specific I need to do?

  • If an employee is detected as Offboarded in Secureframe, it's suggested that the admin reviews the user's connected services to ensure access to other tools and accounts is deprovisioned. Once this is confirmed, the admin can mark the user as inactive.
  •  Secureframe will also provide a Active account(s) status, which means we detected this user has active accounts. Please ensure these accounts are deactivated.

 

Was this article helpful?

Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.