Drata

This test is part of the <b>Annual Access Control Review </b>control that ensures your company performs annual reviews of the System Access Control Policy.

If Drata finds that your System Access Control Policy has not been reviewed within the last 12 months the test will fail.

To remediate a failed test, you will need to ensure a review of the System Access Control Policy is performed and that the policy is marked as 'approved' within Drata.

<a href="https://www.csoonline.com/article/3251714/what-is-access-control-a-key-component-of-data-security.html" rel="nofollow noopener noreferrer" target="_blank">What is a System Access Control Policy?</a>

- <a href="https://www.csoonline.com/article/3251714/what-is-access-control-a-key-component-of-data-security.html" rel="nofollow noopener noreferrer" target="_blank">What is a System Access Control Policy?</a>

Drata inspects your company records to determine if a System Access Control Review has been conducted within the last 12 months.

Test: Conducts Access Control Reviews

Find answers and get help from Intercom Support and Community Experts

Empty Help Center

Uh oh. That page doesn’t exist.

Disappointed

Neutral

Smiley

Title

Track the progress of all tickets related to your company.

Tickets portal.

{assigneeName} needs more information from you