User Access Management Process [Insert classification]
6 Access reviews In order to ensure that access to IT systems is only available to authorised personnel, the [IT Department] will carry out a user access review every six months.
Figure 4: Access review process
6.1 Define scope The scope of the review should be defined in terms of the systems and networks that will be covered.
Version 1
Page 18 of 20
[Insert date]