If the aim is to move towards zero trust, the Joiners, Movers and Leavers process needs to be sorted out.