Quarterly Access Review Checklist

This is a short quarterly review you should do in order to keep user permissions accurate and avoid unnecessary work later.

Before You Start

• List the business systems used across your organisation.
• Identify who is responsible for approving access to each system.
• Export or obtain the current user list for each platform.

Review Each System

For every application or service, ask:

• Does every listed user still work for the business?
• Does each person still need access to this system?
• Is their level of access appropriate for their current role?
• Are administrator or privileged accounts still required?
• Are shared accounts still necessary and appropriately controlled?
• Have contractors, consultants or third parties who no longer require access been removed?
• Are there any user accounts that nobody can identify or explain?

Follow Up

• Remove unnecessary accounts.
• Reduce permissions where higher access is no longer required.
• Record any changes made.
• Confirm the review with the relevant manager or system owner.
• Schedule the next quarterly review.

Access Review Record

System	Business Owner	Review Date	Changes Required	Completed
				☐
				☐
				☐
				☐

A final question

If someone asked you today, “Who has administrator access to your critical business systems?” would you be able to answer confidently within a few minutes?

If not, this checklist is a good place to start.

Not sure whether your business needs additional operational support?

Ask a simpler question: what are you actually risking by delaying a second opinion? 

That is exactly what our Free IT Health Check is designed to address. It brings potential risks into one clear view so you can understand whether your environment is genuinely being managed or simply functioning without incident.

Call: 01707 378455
Email: hello@tristartechsolutions.co.uk