[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"glossary-access-review::en":3,"gloss-cluster-access-review::en":26,"gloss-next-access-review::en":9},{"slug":4,"category":5,"name":6,"definition":7,"meta_desc":8,"faq":9,"schema_markup":9,"related":10},"access-review","security","Access Review","An access review is a periodic check that the people and services holding access to a system still need it, with an owner confirming each entitlement or having it removed. It exists because access accumulates: joiners are granted, movers keep what they had and gain more, leavers are sometimes missed, and integrations outlive the project that created them. Nothing in day-to-day work removes an unnecessary permission, so a scheduled review is the mechanism that does.\n\nIt matters more once AI is in the picture, because retrieval systems inherit whatever access they are given and then expose it through a much easier interface. A stale share on a folder used to mean a document a former team member could find if they went looking; with an assistant indexing that folder, it means a question anyone can ask in plain language and get an answer to. Over-broad access that was theoretical becomes reachable.\n\nA review that produces a real result has an owner who knows what the access is for — usually the system or data owner, not the security team, who can see the list but not judge the need. It covers service accounts, API keys and integration credentials alongside human users, since those are typically the most privileged and the least often revisited. And it defaults to removal: an entitlement nobody confirms should lapse, rather than remaining because nobody replied.\n\nThe well-known failure is rubber-stamping. A quarterly review presented as hundreds of rows to a manager with a deadline gets approved wholesale, and the exercise produces an audit artefact and no change in exposure. Smaller, more frequent reviews scoped to one system, with the high-privilege and dormant entries surfaced first, get read properly. Anything that can be decided from identity data — deprovisioning on departure, role changes propagated automatically — should be automated out of the review rather than presented to a human.\n\nPair it with the AI system inventory: for each indexed source, the question is not only who can reach the index but whether the index itself respects the permissions of the underlying documents at query time. A review that confirms user entitlements while a retrieval layer answers with content those users cannot open has checked the wrong boundary.","An access review confirms that everyone holding access still needs it. AI raises the stakes: a retrieval index turns stale access into an answerable question.",null,[11,14,17,20,23],{"slug":12,"name":13},"audit-log","Audit Log (Audit Trail)",{"slug":15,"name":16},"break-glass-access","Break-Glass Access",{"slug":18,"name":19},"least-privilege","Principle of Least Privilege",{"slug":21,"name":22},"role-based-access-control","Role-Based Access Control (RBAC)",{"slug":24,"name":25},"scim","SCIM (System for Cross-domain Identity Management)",[27,31,34,37,40,43,46,48,51,52,55,58],{"slug":28,"category":5,"name":29,"updated_at":30},"ai-governance","AI Governance","2026-09-08T21:32:37+00:00",{"slug":32,"category":5,"name":33,"updated_at":30},"ai-incident-reporting","AI Incident Reporting",{"slug":35,"category":5,"name":36,"updated_at":30},"ai-review-board","AI Review Board",{"slug":38,"category":5,"name":39,"updated_at":30},"ai-risk-tiering","AI Risk Tiering",{"slug":41,"category":5,"name":42,"updated_at":30},"ai-system-inventory","AI System Inventory",{"slug":44,"category":5,"name":45,"updated_at":30},"ai-usage-policy","AI Usage Policy",{"slug":12,"category":5,"name":13,"updated_at":47},"2026-09-08T21:32:36+00:00",{"slug":49,"category":5,"name":50,"updated_at":47},"blast-radius","Blast Radius",{"slug":15,"category":5,"name":16,"updated_at":47},{"slug":53,"category":5,"name":54,"updated_at":47},"bridge-letter","Bridge Letter",{"slug":56,"category":5,"name":57,"updated_at":47},"business-associate-agreement","Business Associate Agreement (BAA)",{"slug":59,"category":5,"name":60,"updated_at":47},"byok","Bring Your Own Key (BYOK)"]