User Access Reviews

ID_4c7fef9c_52e0_4a8c_892c_407330adc471 (ObjectTemplate)


Objective: Review user access at planned intervals in order to validate that the level of access is still appropriate; remediate user access as needed.

Example: Failing to review user access at regularly planned intervals may result in a user who has changed jobs keeping elevated access privileges that are no longer needed to perform the new job function.

Element properties:

TypeSystem.Compliance.ControlObjectiveProjection

Source Code:

<ObjectTemplate ID="ID_4c7fef9c_52e0_4a8c_892c_407330adc471" TypeID="GRCControl!System.Compliance.ControlObjectiveProjection">
<Property Path="$Target/Property[Type='GRC!System.Compliance.ControlObjective']/ExternalName$">$MPElement[Name='GRC!System.Compliance.SourceNameEnum.MicrosoftCorporation']$</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.ControlObjective']/Title$">User Access Reviews</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.ControlObjective']/DisplayName$">User Access Reviews</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.ControlObjective']/Description$">
Objective: Review user access at planned intervals in order to validate that the level of access is still appropriate; remediate user access as needed.

Example: Failing to review user access at regularly planned intervals may result in a user who has changed jobs keeping elevated access privileges that are no longer needed to perform the new job function.
</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.ControlObjective']/ExternalVersion$"/>
<Property Path="$Target/Property[Type='GRC!System.Compliance.ControlObjective']/Type$">$MPElement[Name='GRCControl!System.Compliance.ControlObjective.TypeEnum.Evidence']$</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.ControlObjective']/ExternalId$">ID_4c7fef9c_52e0_4a8c_892c_407330adc471</Property>
<Property Path="$Target/Property[Type='GRC!System.Compliance.ControlObjective']/ExternalParentCategoryId$">ID_99925f98_57c6_4717_8b94_e154f75d0cb6</Property>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_b9cdc072_5855_459a_bbc5_04129dbe2d6c</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_e91c459c_4201_453c_a6f7_06bd02930bc8</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_ceece27d_deb6_444d_9e43_07f8150611cf</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_4c41da8a_2a39_4a6f_8d21_095745b44c50</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_3fe38f17_912a_474f_a179_1e821345d444</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_163c2b04_756b_4b7f_a179_22b46f981f19</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_9442779a_a630_44b8_959a_267200fd4375</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_7968a6cc_e0fd_4af2_9697_35c8a7bbf5e0</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_302599e0_e7eb_44da_a892_3e39d853df2c</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_603ecc56_c47c_4a50_b05b_41b2b1efd2dc</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_d06e6ab0_4932_4868_9459_4214bb7f246a</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_532fabc1_557b_4973_9323_4ac723c07efe</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_9c9d09e0_d11d_4569_8832_5ebe462e56cc</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_a232368e_25d9_498f_9c7e_6496e27acc73</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_514cb0c6_2b60_4643_a2e5_754333c06fbd</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_6add8d45_d308_454c_939e_7600af82a7ec</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_f63fc831_9c87_40c6_bd35_7ebcb42de1c7</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_96496ee1_9f24_490f_93d8_89856fe9ad58</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_e450b75d_8b1b_4b2b_90c4_985ec73913c7</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_a07727cc_26dd_4ad6_8a7b_aaf7cb90fbce</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_98c0b434_2cd4_4d51_9275_ab000fb83c04</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_5c8cacc6_49c2_4a87_9f51_c8162374b33f</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_03efa853_3088_46c6_9d80_cafa0bdd7860</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_388b8de5_142f_4b3f_b060_cf41f0a80007</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_3994ac2f_1077_4849_83c7_de2618412056</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_58ab5232_91a9_416e_b387_f03a81055155</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_0d893943_5b83_4dc4_9173_f63a90f72908</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_7c499e1e_5dff_478d_9a96_f7689d75151f</Property>
</Object>
<Object Path="$Context/Path[Relationship='GRC!System.Compliance.ControlObjectiveCitation' TypeConstraint='GRC!System.Compliance.Citation']$">
<Property Path="$Context/Property[Type='GRC!System.Compliance.Citation']/Id$">ID_b3a857cd_6845_4269_a552_ffdab2d32fa8</Property>
</Object>
</ObjectTemplate>