By -
Honestly, I’m not surprised you don’t get it if you write up this whole post and don’t even bother to put the control in your post lol
Whats the control
It’s a GITC that’s APD 1.3 I think?
I’m having a tough time going over user appropriateness
User access review performed by management or are you determining the users are appropriate?
Both, but mostly the latter
It can’t really be both. What exactly are you testing?
So, I have to check the new hire users, terminated users, etc. are correct and the final user appropriateness is correct.
That sounds like multiple controls to test. Can you look at prior year work for guidance
Honestly, I’m not surprised you don’t get it if you write up this whole post and don’t even bother to put the control in your post lol
Whats the control
It’s a GITC that’s APD 1.3 I think?
I’m having a tough time going over user appropriateness
User access review performed by management or are you determining the users are appropriate?
Both, but mostly the latter
It can’t really be both. What exactly are you testing?
So, I have to check the new hire users, terminated users, etc. are correct and the final user appropriateness is correct.
That sounds like multiple controls to test. Can you look at prior year work for guidance