2 unread
TeamEmail
riley@example.com
Do we have evidence ready for the SOC 2 access review?
Exported quarterly access lists for all six systems and matched them to HR records. Two departed contractors still had read access; both are revoked and logged.
Great. Can you document the review cadence for the auditors?
Added a policy note: quarterly reviews, with a 5-day SLA to revoke access when someone leaves.