From 879992decdf5eaeda761ce4fec86bc9138f818b1 Mon Sep 17 00:00:00 2001 From: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com> Date: Tue, 24 May 2022 08:32:32 -0500 Subject: [PATCH] Editor pass - Security policies - Access control policy (#5847) This has been edited for content and copy. --- handbook/security-policies.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/handbook/security-policies.md b/handbook/security-policies.md index 0522dd04c6..ac27fde77d 100644 --- a/handbook/security-policies.md +++ b/handbook/security-policies.md @@ -80,9 +80,9 @@ Fleet policy requires that: 3. access to critical resources, such as production environments, must be approved by the security team in addition to the requestor’s manager. -4. access must be reviewed on regularly and revoked if no longer needed. +4. access must be reviewed regularly and revoked if no longer needed. -5. upon termination of employment, all system access must be revoked, and user accounts terminated within 24 hours or one business day, whichever is shorter. +5. upon the termination of employment, all system access must be revoked, and user accounts terminated within 24-hours or one business day, whichever is shorter. 6. all system access must be reviewed at least annually and whenever a user's job role changes.