User access review
A periodic check that everyone’s access is still right.
The business or data owner reviews who has access to a system and confirms or removes it. It catches access that built up over time (“privilege creep”) and accounts left behind by leavers.
On the exam
Reviews should be done by the owner of the data, not by IT alone, and should leave evidence of the changes made.
Related terms
- Least privilegeGiving each user only the access their job needs.
Test yourself with today’s question of the day.