Review date: [date] Reviewer: [name, role]
Scope: ENCLAVE-USERS and all PROJ-* groups; privileged accounts
Method: group membership export compared to HR active list;
privileged account list compared to authorized roles
Findings: [e.g., 1 departed employee still in PROJ-A-QUALITY, removed same day]
[e.g., 1 contractor account past end date, disabled]
Changes made: [listed with ticket or change request numbers]
Next review: [date]
Signed: [name] Evidence: export attached, datedFree to use, edit, and share, including by an MSP for a client, under CC BY 4.0. Keep the credit "Hans Study, hans.study" and the licence with it. None of it is legal advice or a substitute for the contract clauses in front of you.
References
- Protecting specified information in non-Government of Canada systems and organizations (ITSP.10.171)Canadian Centre for Cyber Securitycyber.gc.ca
- NIST SP 800-171 Revision 3, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsNISTcsrc.nist.gov
Outbound links open in a new tab. Source-pinned. If a vendor moves a doc, this block gets updated.