Regular monitoring of permission access is equally mandatory. There have been situations where individuals gained access to critical information through a job role they held ten years ago! Employees who have left the company must also have their access removed as quickly as possible. https://www.sbnation.com/users/dataspaceacademy