[IMPORTANT] [ACTION REQUIRED] Security Notice: Individual User Access account clean-up - TVLK Dev

Background

In an effort to secure and bring tvlk-dev AIM to compliance, the Security Operations Team is taking steps to clean up old and unactive accounts possible left behind and/or not needed anymore in tvlk-dev.

What do you need to do ?

We have noticed that most of the users account are inactive for the last 15 days who still have access to tvlk-dev account. 
 In more detail, Out of 546 users, 388 of them has not logged into the dev account from last 15 days. When we see further, 114 users has not logged in to tvlk dev this year.

We request the administrators / PIC of tvlk-dev environment to have a look into the below attached sheet and help clean up account no longer needed that they recognizee.

Below is the list of users having direct access to AWS legacy tvlk-dev account.(Inactive users are highlighted in Yellow)

https://docs.google.com/spreadsheets/d/1oKc-bHDDfxUQVbCMZOvGw2B0mou5OqHWW_N57LQOjnM/edit?usp=sharing

What is the Plan and Timelines ?

Please make sure to take a close look and remove and/or disable the accounts from your side as needed on or before 15th May 2020. 

Post date, we will be re-assessing the progress and will move to enforce and disable the accounts currently flagged as not active within a year first (114 users) , then moving on to the rest at a later date which will be announce here.

Feel free to reach out to us in case of any dependencies or any other questions and/or concerns.