Do you require a periodical authorization and validation (e.g. at least annually) of the entitlements for all system users and administrators (exclusive of users maintained by your tenants), based on the rule of least privilege? Jonathan van Driessen September 03, 2021 14:54 Yes, we do. Related articles Is physical and logical user access to audit logs restricted to authorized personnel? Comments 0 comments Please sign in to leave a comment.