TBSP will establish a formal policy and procedure for periodic review of user access and dormant accounts. The policy will cover the following topics:
- Review of unused IDs on application every 90 days.
- Review of user profiles on the application at least twice a year.
Additionally the policy and procedure will be approved by the management and communicated to the relevant personnel.
Also, TBSP will maintain records and evidence of review and approval for reference.
Additional Document
1. Policy and procedure for periodic review of user access (Please provide the password to access)