Access Review Process for Quarterly Recertification
Review who has access to what.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Design a quarterly access review. Systems in scope: [SYSTEMS]. Roles and groups: [ROLES_GROUPS]. Number of users: [USER_COUNT]. Current process: [CURRENT_PROCESS]. Define the steps: extract the access list, assign a reviewer for each system (owner, not IT by default), present entries in a review sheet with columns for user, role, last used, and reviewer decision, set deadlines, record removals, and verify they happened. Provide the reviewer guidance in plain words, rules for privileged accounts (reviewed monthly), and handling of non-responses (access removed after a grace period). Add a metrics set: percentage completed on time, access removed, stale accounts. Include a sample review sheet with five fictional rows and a communications template. Add a guide for reviewers with five questions to ask about each entry, such as whether the person has changed role, and a rule that silence is not approval. Provide a short report template for the leadership team that shows completion, removals and open exceptions, and an annual improvement review. I am authorised to review the systems described here and nobody else's. Provide protective guidance only, and say so if a step would require permission I have not confirmed.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.