This policy establishes the standards and procedures for maintaining proper system access security at a company. It addresses user access rights, responsibilities of process owners, changes and deletions of employees, and the annual review of access and segregation of duties.