Orphan-account review checklist for IT teams

Use this checklist when an application account cannot be confidently linked to its owner. The aim is a defensible decision, not simply a smaller account count.