45 Mandatory-absence review

Finance and admin staff are required to take real, contiguous leave, and while they are away someone else reviews what their account does: sessions rotated, mailbox delegations and forwarding rules inspected, activity checked. Fraud and quiet persistence both depend on the perpetrator being present to suppress the evidence, and an enforced absence takes that away. It is an HR and employment-terms control with no console surface.

Caveats

The whole detection value is in the review that happens during the absence¹
It detects, it does not prevent²

This is a process control — it is carried out offline, so there is no Admin Console walkthrough to show.

Ongoing maintenance

requires a human Annually per covered role: schedule the absence and run the review while access is suspended.

How to verify

Check every covered role has a scheduled contiguous absence in the last cycle and that the review-during-absence produced a written result.

v0.0.1Detect policy #30 · #2 ↗