Transcript
Active employment does not prove business need
A user can remain employed and still have inappropriate access. Imagine a former Quality reviewer who moves to information technology support but retains C A P A approval and administrator roles. The identity is active, yet current responsibility and segregation of duties no longer support the access.
Compare access with current work
For each user and service account, compare assigned roles with the approved role design, current job responsibility, process-owner decision, and exception record. Review privileged functions, approval authority, inactive accounts, shared access, service-account ownership, and time-limited elevation.
Record removal and approval
Remove Quality approval, retain only justified support access, and require controlled elevation for administration. Attach completion evidence, review activity during any overlap, and obtain accountable approval. Access review asks whether current access is appropriate, not only whether the person still works here.