A global enterprise discovers that terminated employees in acquired subsidiaries retain active VPN credentials an average of 45 days post-termination. HR blames IT for slow deprovisioning; IT blames HR for delayed termination notifications. What should you address FIRST?
A. Implement automated identity lifecycle management to eliminate manual delays
B. Establish a unified offboarding SLA with defined handoff triggers between HR and IT
C. Deploy continuous access certification reviews to catch orphaned accounts
D. Require subsidiary IT teams to run weekly active directory reconciliation reports