Heyo! My boss is convinced we need to create screenshot evidence of adding new staff to Google Calendar meetings, Google Groups, and various accounts like Jira. I'm working on automating this with our HRIS and convincing the org to pay for enterprise licenses so we can use SAML with JIT to handle this for us, but until then would Vanta not be enough evidence for an external auditor?
I really only have experience with internal audit teams where I can just go ask them if a proposed change is acceptable, so I don't understand the process here outside of just doing both and waiting for our next audit to confirm.
Thanks!