This work program sample can be used by organizations to measure the infrastructure for an implemented time and labor system or application.

Sample steps include verifying that users are aware of their responsibilities; periodically identifying the process by which access to the applications is granted, modified, terminated and reviewed; ensuring that access setup and modification are appropriately authorized, that terminations and transfers are performed in a timely manner, and that rights are periodically reviewed for appropriateness; and determining the ability of users to access the applications remotely and ensuring that access is appropriately restricted to authorized personnel.