What is User access review?
In short
A user access review is a periodic check, usually by the business owners of a system, that every user's access is still needed and appropriate for their role.
Key takeaways
- It finds accounts of people who have left and rights that have built up over time.
- The user list reviewed must be complete and accurate, and the review and any removals documented.
- Privileged accounts, such as administrators, are reviewed more often.
Where it's tested
ISC: Information Technology General Controls (ITGCs) — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
Each quarter, department managers review a list of everyone with access to the purchasing system and confirm that each person still needs it. This control is best described as: