Comply with legal requirements by using attestation
Business managers are best-placed to determine whether an employee or partner should have access to information. They are responsible for the processes in their part of the organisation and know what their staff are doing. So why make them responsible for not only allocating (but also revoking) access rights. Business Managers are the first to know when organisational changes are made or a partnership with an external party has been terminated. The most important element in ensuring compliance is revoking access rights in a timely manner.