it checklist onboarding

Standardized Employee Technology Provisioning Protocol

Document Control

• Document ID: IT-OPS-ONB-[__________]
• Version: [__________]
• Effective Date: [__________]
• Review Cycle: [__________] (e.g., Annual/Bi-annual)

1. Purpose & Scope

This document defines the systemic requirements and procedural steps for provisioning hardware, software, and identity access for new personnel at [Company Name]. The scope covers all full-time, contract, and temporary staff requiring access to [Company Name] digital infrastructure.

2. Prerequisites

• Approved Employee Requisition Form (ERF) from [Human Resources Department].
• Hardware inventory availability (Laptop, Peripherals, Security tokens).
• Provisioned Identity Provider (IdP) account (e.g., Okta, Azure AD, JumpCloud).
• Secure credential delivery mechanism (e.g., encrypted password manager vault).

3. Roles & Responsibilities (RACI)

R = Responsible, A = Accountable, C = Consulted, I = Informed

4. Step-by-Step Provisioning Procedure

Phase 1: Hardware Preparation

• Verify physical asset ID: [__________]
• Perform factory reset/OS re-image to [Standard OS Version]
• Install mandatory security agents (EDR, MDM, VPN client)
• Configure disk encryption (BitLocker/FileVault) and verify recovery key escrow
• Asset tag verification: [__________]

Phase 2: Identity & Access Management (IAM)

• Create corporate email account: [__________]@[Company Domain]
• Assign user to security groups: [__________]
• Initialize MFA (Multi-Factor Authentication) enrollment
• Provision access to core SaaS tools: [List primary tools here]
• Set password expiration policy to: [__________] days

Phase 3: Deployment & Handover

• Ship hardware to [Physical Address/Department]
• Verify receipt of equipment via courier tracking: [__________]
• Conduct onboarding sync to confirm credential access
• Confirm successful login to [Primary Communication Platform]
• Document completion in IT asset registry

5. Quality Assurance, Pro-tips, & Pitfalls

Quality Assurance:

• Perform a "Least Privilege" audit post-provisioning to ensure the user does not have administrative rights unless explicitly requested.
• Validate that the hardware asset is linked to the [Company Name] MDM dashboard.

Pro-tips:

• Use automated scripts (e.g., PowerShell, Bash, or Terraform) to provision standard user groups to reduce manual configuration errors.
• Pre-stage "Gold Images" of workstations to reduce Phase 1 lead time by 70%.

Common Pitfalls:

• Credential Leakage: Never send initial passwords via unencrypted email. Use a secure portal or temporary SMS code.
• Orphaned Accounts: Failure to set an account expiration date for contractors, leading to security vulnerabilities.

6. FAQs

Q: What if the new hire requires specialized software not in the standard image? A: Submit a "Software Exception Request" to the IT Manager, [Name/Department], at least [__________] business days prior to the start date.

Q: How do we handle hardware returns for offboarding? A: Refer to the Employee Offboarding & Asset Recovery Protocol (Doc ID: [__________]).