Regular monitoring of permission access is equally mandatory. There have been situations where individuals gained access to critical information through a job role they held ten years ago! Employees who have left the company must also have their access removed as quickly as possible. https://letterboxd.com/dataspaceacadem/