Privileged access to systems and applications is disabled after 45 days of inactivity.
Topic
Suspension of access to systems
Applicable to
all
History
Dec 2023
Privileged access to systems and applications is disabled after 45 days of inactivity.
Existing controls relating to automatically disabling access to systems, applications and data repositories after 45 days of inactivity were amended to remove the requirement that it occur automatically, noting that in some cases supporting governance mechanisms may be required to assist in identifying when accounts have not been used within the last 45 days. [ISM-1404, ISM-1647, ISM-1648, ISM-1716]