Access Control Supervision and Review Checklist

Download Free Access Control Supervision and Review

- Determine if the organization supervises and reviews the activities of users with respect to the enforcement and usage of information system access controls.

- Examine access control policy, procedures addressing supervision and review of access control enforcement and usage, security plan or other relevant documents; reviewing for the measures to be employed to supervise and review user activities with respect to the enforcement and usage of information system access controls.

- Interview an agreed-upon representative sample of organizational personnel responsible for supervision or review of access controls; conducting focused discussions for evidence that the measures are implemented as intended.

- Determine if the organization employs automated mechanisms within the information system to support and facilitate the review of user activities.