A user ID inventory is taken on a regular basis, at least every six months. Unnecessary user IDs are deleted while inappropriate access rights are changed. Both are reported to the manager of the system division in the form of a User ID Inventory Results Report.