Mechanisms exist to revoke user access rights in a timely manner, upon termination of employment or contract.