Access review
In short: An access review is a scheduled check in which an owner confirms or removes each permission an identity holds. For agents, the named owner reviews tools, data scopes and credentials against the purpose statement. Completed reviews are some of the first evidence auditors ask to see.
Which controls use this term?
- GOV-15Periodic access review. Review each agent's access at least quarterly, with its named owner confirming or removing every permission and tool.
Which terms are related?
Accountable owner, Certification campaign, AI management system.
Reviewed by The Register desk