Control: ism-1647; Revision: 0; Updated: Sep-21; Applicability: ALL; Essential Eight: ML3 ​

Privileged access to systems and applications is automatically disabled after 12 months unless revalidated.