AC-7
Quarterly access reviews
FailingOrg
Access to production and sensitive data is reviewed and re-certified every quarter by system owners.
Recommended fix
Close "Quarterly access reviews" by completing the activity and letting Attestloop collect the evidence.
- 1Assign an owner and a due date for the control.
- 2Complete the activity (e.g. run the review, update the register).
- 3Attestloop collects the evidence from your connected systems automatically.
- 4A credentialed expert co-signs, moving the control to passing.
Framework requirements (1)
SOC 2SOC2-CC6.2Failing
Evidence (0)
No evidence collected yet. Attestloop will gather it automatically once connected.