Description
Quarterly user access review for SOC 2 compliance.
Requirements
- Review all user access lists
- Remove terminated employee access
- Validate role-based permissions
- Document review completion
Applicable To
SaaS CompaniesCloud Service Providers
Penalty Information
âš Missing access reviews is a common SOC 2 exception finding.