What is joiner, mover, leaver (JML)?
Joiner, mover, leaver (JML) is the identity lifecycle process that grants access when someone joins, changes it when they move roles, and removes it when they leave. Each of the three moments carries its own security risk.
How it works
New joiners are targeted by phishing and pretexting before they know what normal looks like. Movers often keep access from old roles, which accumulates. Leavers may take data with them, and accounts left active become targets.
JML is usually automated through HR systems and the identity provider, so a change in the HR record drives a change in access.
Why it matters
Access that outlives its purpose is one of the most common findings in audits and breaches. Watching the JML moments closes much of that gap.
How Living Security helps
Living Security brings tenure, role, department and manager changes onto every identity, so joiner, mover and leaver risk shows up next to threat and behavior.
