User Access Management Process [Insert classification]
6 Access reviews In order to ensure that access to IT systems is only available to authorised personnel, [Organization Name] will carry out a user access review every six months.
Figure 4: Access review process
Version 1
Page 19 of 21
[Insert date]