We recommend that the Department enforce established access authorization controls and ensure all requirements are met prior to granting system access. Formally perform and document the periodic reviews of all database user accounts in accordance with Department policy to confirm access is current, authorized, and commensurate with job responsibilities.