Access reviews

On a quarterly basis, system owners conduct user access reviews of production servers, databases, and applications to validate internal user access is commensurate with job responsibilities. Identified access changes are tracked to remediation.