Onboarding and offboarding are operationally complex, time-consuming processes - and security frequently falls between the cracks.