What is a user access review?
A user access review is a periodic check that everyone who has access to a system still needs it. A manager or system owner confirms or removes each person's access, and the result is recorded as evidence. Quarterly reviews are common for sensitive systems.
What the buyer is really asking
Access reviews are how you catch access that should have been removed. Give the cadence and the owner, and be ready to show that the last review actually happened.
Other ways buyers ask it
Every one of these wants the same answer:
- “How often do you review user access?”
- “Do you perform quarterly access reviews?”
- “Who reviews access rights?”
Evidence to have ready
- The access review cadence in your access control policy
- The most recent completed review and its sign-off
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.