Your answer should be complete and at least one page in length.
Create your own User Access and Rights Review document for your organization. How frequently would you review occur? What would be the implications if lapsed accounts are detected? Who should perform the reviews? What appeals process should be in place in case an end-user disagrees with the findings?