Signing-in to another org with my GitHub creds is a great way to lose access at the whim of either org.

Since giving away access control to an external organization is against iso27002, we know how they stand on that.

Would you like to provide some information about this? Do they just not have a landing page? No questions allowed?