# Stale & Orphaned Accounts
URL: https://docs.autociso.io/console/ciso-reports/stale-accounts/
Description: This report identifies active accounts that are either dormant (no recent activity) or orphaned (no matching employee in your directory, or an employee who has been terminated).

*This is the help text the console shows in the help panel on this page.*

This report identifies active accounts that are either dormant (no recent activity) or orphaned (no matching [employee in your directory](https://docs.autociso.io/console/directory/employees/), or an employee who [has been terminated](https://docs.autociso.io/console/ciso-reports/offboarding-violations/)). Both represent security risks — dormant accounts can be hijacked undetected, and orphaned accounts may belong to [former employees or contractors](https://docs.autociso.io/product/lifecycle/offboarding/).

### Key Metrics
- **Total Stale/Orphaned**: Active accounts that are dormant, orphaned, or both.
- **Dormant Accounts**: Active accounts with no recorded usage in 30+ days.
- **Orphaned (No HR Match)**: Accounts with no matching active employee in the directory.
- **Avg Dormant Days**: How long dormant accounts have been inactive on average.

### HR Match Status
The **HR Match** column shows whether the account owner was found in the employee directory. `No Match` indicates an orphaned account requiring immediate investigation. The **Dormant Days** column is color-coded: blue (under 90 days), amber (90–179), red (180 or more).

### Remediation
1. For dormant accounts: contact the account owner to confirm the account is still needed.
2. For orphaned accounts: investigate whether the account belongs to a contractor or former employee, then revoke if unneeded.
3. Document your decision for audit trail purposes.