Banker Workstation Setup and Provisioning SOP

Standard procedure for imaging, configuring, and provisioning a new banker workstation with core banking access, least-privilege permissions, and completion verification.

Steps

• Verify the provisioning request
  The IT technician verifies that the ticket includes the employee name or unique identifier, manager approval, start date, workstation type, branch or department, and required applications. The IT technician confirms that the request matches the approved role-based access matrix before proceeding.
• Prepare the workstation for imaging
  The IT technician connects the new workstation to the imaging network or deployment station. The IT technician confirms the device serial number and asset tag against the ticket and records the asset in the inventory system.
• Apply the approved workstation image
  The IT technician deploys the approved image to the workstation. The IT technician confirms that the image version matches the current standard build and that the deployment completes without error.
• Validate the security baseline
  The security administrator or IT technician verifies that endpoint protection is active, disk encryption is enabled, patch level is current, local administrator access is restricted, and required monitoring agents are installed. The security administrator records any deviation as a non-conformance and escalates unresolved issues.
• Configure least-privilege user access
  The security administrator assigns the banker to the approved role group and applies only the minimum permissions required for the job function. The security administrator removes any local administrator rights unless a documented exception exists and is approved by the appropriate manager.
• Provision core banking applications
  The IT technician installs or enables the approved core banking applications required for the banker role. The IT technician confirms that application access aligns with the approved access matrix and that no unapproved modules are enabled.
• Test workstation functionality
  The IT technician signs in with the assigned user account and verifies network connectivity, domain access, printer access if required, and successful launch of the core banking application. The IT technician records any failures and escalates unresolved issues to the appropriate support team.
• Complete handoff and document closure
  The IT technician updates the ticket with the asset tag, image version, access groups applied, verification results, and any exceptions or deviations. The IT technician notifies the manager or end user that the workstation is ready and closes the request after required approvals are recorded.