To ensure security compliance and audit readiness, you can set up area access reviews
to occur at scheduled intervals.
Before you begin
Make sure that the site has areas defined.
Make sure that the site is not already part of another review.
What you should know
Only a site owner can schedule area access reviews.
Site owners can define a review schedule for one or multiple areas under their
site.
Best Practice: Schedule your site access reviews so that they are automatically
triggered the day, week, or month before corporate audits or site safety checks to ensure
your security compliance and audit readiness.
Procedure
From the homepage, click Organization
> Access reviews.
Click Schedule access review.
In the Select review type dialog, select Area access
review.
In the Site access review schedule dialog, select the options that
you require.
Enter a Name for your area access review.
Select the Trigger site reviews frequency that you require
and configure the options.
Note: The options that are displayed vary depending on the Trigger site
reviews frequency that you select.
Yearly
Specifies a site access review that occurs yearly.
Monthly
Specifies a site access review that occurs monthly.
Weekly
Specifies a site access review that occurs weekly.
Now
Specifies a site access review that occurs immediately.
For example, an
access review could be started manually using the Now schedule.
Typically manual access reviews are used to test reviews before an annual
review or scheduled reviews to check that all participants are properly set,
or to force a review after an incident.
If you selected Yearly, select the day and month or months
that you want the site access review scheduled.
If you selected Monthly, select the day that you want the
site access review scheduled.
If you selected Weekly, select the day or days that you want
the site access review scheduled.
Select the time that you want the site access review scheduled.
Note: The time shown in the Site access review schedules dialog
options and all scheduled review times uses the time zone of the site.
Search for or select the site that you want to include in your site access
review.
Search for or select the areas that you want to include in your site access
review.
(Optional) In the Notes field, you can add more details as
needed.
The Notes field is used to enter more detailed information
about the site access review. This field is typically used when the site performs
security reviews. For example, an ISO 27001 review or a SOC 1 or SOC 2 audit
report.
The following example shows a site access review for a server room area
scheduled to occur Yearly at quarterly intervals, on the first
day of the month at 08:00.
The following example shows a site access review for a data center area
scheduled to occur Monthly, on the first day of every month at 08:00.
The following example shows a site access review for a data center and
server room area scheduled to occur Now.
Note: Access reviews that are configured with a schedule of Now
are not displayed on the scheduled Access reviews page.
Instead, they are immediately displayed in the My tasks view
of the relevant reviewers.
Click Create.
The scheduled access reviews are displayed in the Access
reviews page.
(Optional) Click an area access review in the list to see the schedule details.
Click Go to access reviews
report
to display all access reviews.
Your site area access reviews have now been scheduled.
Example
After you finish
Do one or more of the following to complete your access reviews when required: