To maintain your system’s security on a continuous basis, it is best to audit user access to all applications, and what they can do in those applications, networks, and other enterprise assets periodically. It is imperative to review all accesses to find any unauthorized access or over access, validate accesses as certified or revoked, and ensure the availability of an audit trail. Such an access re-certification exercise is undertaken on annual basis in almost all organizations nowadays to ensure that only enough access is provided to a user, based on their requirements, and the said user is not given excess access than needed.