IDENTITY CENTRIC

An access review is a process that involves reviewing the access privileges of users within an organization to ensure that they are appropriate and in compliance with relevant policies and regulations. Coordinating an access review for a large company can be a complex task, and there are a number of individual things that you should be worried about:
‍

1. Defining the scope of the review: It is important to clearly define the scope of the review, including which systems and resources will be included, which users will be reviewed, and what criteria will be used to determine whether access is appropriate.
   ‍
2. Gathering and organising data: You will need to gather and organise data on the access privileges of all relevant users, including information on which systems and resources they have access to and what permissions they have.
   ‍
3. Identifying and classifying access risks: You should identify and classify any access risks that you identify during the review process, including any potential security vulnerabilities or compliance issues.
   ‍
4. Communicating with stakeholders: You will need to communicate with a range of stakeholders throughout the review process, including IT staff, business owners, and senior management. It is important to keep these stakeholders informed and to involve them in decision-making as appropriate.
   ‍
5. Documenting the review process: You should document all aspects of the review process, including the scope, any access risks identified, and any actions taken to address these risks. This documentation will be important for demonstrating compliance and for future reference.
   ‍

Overall, it is important to approach an access review in a systematic and organized manner, and to be proactive in identifying and addressing any access risks that you identify.

‍