Employees that separate from the institution retain access to systems

Control

Perform annual access reviews for critical and confidential systems