Access control
Do you perform regular access reviews and certifications?
How to answer this security questionnaire question, with an expert response your security or GRC team can adapt.Expert answer
Conduct periodic access reviews in which owners recertify that each user's access is still required, and revoke anything unnecessary. Document the reviews as evidence for SOC 2 and ISO 27001.Answer every security questionnaire in minutes
Wolfia drafts accurate, cited answers to security questionnaires and RFPs from your existing documentation. See it work on your own questions.Book a demoRelated access control questions
Is multi-factor authentication (MFA) required for all users?What is your password policy?How do you handle employee offboarding?Do you perform background checks on employees?How do you manage access to production systems?Do you support single sign-on (SSO) for customers?
Browse the full security questionnaire question library