How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the users on her
Immediately after an employee is terminated
Every five years
Every time they patch the server
Reviewing the accesses and rights of the users on a system at least annually is acceptable practice. More
frequently would be desirable but too frequently would be a waste of administrative time.