Ensures employees and users have the correct access to resources throughout their tenure. - **Key Components:** - **Access Reviews:** Planned reviews of user access needs, rights, and history. - **Reviewers:** Resource owners, delegates, or end users who self-attest. - **Implementation Plan:** Define resources to review, frequency, reviewers, notifications, and actions.  - **Automatic Actions:** Remove access for inactive accounts and perform actions for unreviewed accounts. - **Manual Actions:** Reviewers can approve removals before automated actions.