| Page Properties | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Purpose
To limit access to information and information processing systems, networks, and facilities to authorized parties in accordance with business objectives.
...
Administrators shall perform access rights reviews of user, administrator, and service accounts on a quarterly basis 45-day intervals to verify that user access is limited to systems that are required for their job function. Access reviews shall be documented.
...