thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Access Review

Periodic verification by managers or owners that users' access rights are still appropriate.

Definition

Access reviews (recertifications or attestations) catch privilege creep, orphaned accounts, and inappropriate access. Regulations such as SOX and frameworks like ISO 27001 expect them for sensitive systems. Microsoft Entra ID Governance and other IGA tools automate review campaigns.

Example

Every quarter, application owners confirm or remove each user's access to the ERP system.

Exam tip

Access reviews are a detective control for privilege creep.

Related terms