Access grants reviewed on a set schedule, not left open
Roles and permissions are reviewed against who actually still needs them, so access does not silently accumulate as people and projects change.
- Scheduled review of roles and permissions
- Stale grants flagged for removal
- Changes logged against a clear owner