# ISO27001 A.5.18

URL: /systems/trust-and-governance/criteria/iso27001/a-5-18 · Id: `criterion:iso27001:A.5.18`

> Access rights are provisioned, reviewed, modified and removed according to the access control policy.

Access rights are provisioned, reviewed, modified and removed according to the access control policy.

| Property | Value |
| --- | --- |
| Framework | ISO27001 |
| Reference | `A.5.18` |
| Satisfied by | [Permission decay](/systems/trust-and-governance/controls/permission-decay), [Permission widening](/systems/trust-and-governance/controls/permission-widening) |