SOP Template KitPeriodic Access Review SOP
Find and remove access that is no longer needed.
The full Periodic Access Review SOP (all 5 steps, 2 controls, records and measures) is one of 36 editable Word SOPs in the SOP Template Kit: $79.
| Document no. | IT-02 | Department | IT & Security |
1. Purpose
Find and remove access that is no longer needed.
2. Scope
All critical systems [quarterly]; others [annually]. Includes service accounts and AI agents with credentials.
3. Roles and responsibilities
| Role | Responsibility |
|---|---|
| IT | Extracts user lists. |
| System Owner | Certifies access. |
| Managers | Confirm their team's access. |
4. Procedure
| Step | Who | What to do |
|---|---|---|
| 1 | IT | Export all accounts and permissions for each in-scope system, including service and agent accounts. |
| 2 | IT | Match accounts to HR records; flag leavers, movers and unknown accounts. |
| 3 | System Owner | Review each account: keep, change or remove; justify privileged access. |
| + 2 more steps, 2 controls, 2 records and 2 measures in the full SOP. | ||