What to change
Inventory non-human access alongside people. Ask the departing supplier and hosting owner to identify deployment tokens, connected applications and automated jobs associated with the old arrangement. Replace or revoke obsolete credentials through a controlled transition, then test the approved publishing route. The objective is to preserve legitimate automation while removing unexplained ability to alter the site. Keep secret values out of the inventory; record purpose, owner and lifecycle decision instead.
A worked example
Illustrative example
Illustrative test: The incoming supplier can publish an authorised test while the retired route no longer works.
How to check the result
Every continuing deployment credential has an accountable owner.
A mistake to avoid
Removing visible user accounts does not necessarily remove automation access.
Your action checklist
Use these checks to prepare a discussion with your team or supplier. Tick a check when you have recorded the decision or evidence, rather than when a feature has simply been promised.
Entries stay in this page and are not submitted to Kay & Co. Download your notes before leaving; the page does not save them.
Further reading
These primary sources provide additional context for the project decisions above.
Related decisions
Turn the brief into a working service
Kay & Co. can help you scope the work, design the experience and deliver the right solution for your organisation.
Explore support & operations services or discuss your project.
Try the free Healthcare Digital Planner to find your starting priority.