how do I enter that we revoke access of departing staff

This question belongs to access policy, not to HR process

This falls under access policy, including management of business assets — not under a separate HR section. The requesting party wants to know whether accounts, passwords and access rights of departing personnel are systematically revoked, and whether this happens within a fixed timeframe after the last working day. A good answer mentions three things: who performs the revocation (IT, HR, or an automated process), within what timeframe this happens, and whether this also applies to access to third-party systems such as cloud applications or VPN.

If there is a fixed procedure — for example: HR reports termination, IT deactivates all accounts within 24 hours — then "yes" can be substantiated, provided that this process is actually documented and does not just happen in practice. If that documentation is missing, or if revocation happens ad hoc without a fixed timeframe, then "to be determined" is the more honest answer: the system suggests that as long as the file has no procedure description or supporting document, and the entrepreneur confirms himself whether he wants to tighten that before submitting. Often this is a matter of documenting something that already happens, rather than setting up a new process.

Why this falls under access management: Article 21 paragraph 2 and Annex A

Article 21 paragraph 2 of the NIS2 Directive mentions access policy and management of business assets as one of the ten mandatory measures; revoking access upon termination is a direct part of this, because a continuously active account of a former employee is an unmanaged access point. ISO/IEC 27001 elaborates on this further in Annex A, where termination or modification of access rights at the end of employment appears as a separate control measure. For companies that themselves fall within the scope of these rules — this is described in the question of whether the undertaking falls within the scope of the Directive or its national transposition — this is therefore not an optional detail, but part of the mandatory basic measures.