Glossary · IT & systems
Access management
Deciding who is allowed to use which data and systems.
Access management is about who is allowed to use which data and systems. Not everyone needs to be able to reach everything. A good arrangement gives each employee exactly the access they need for their work, no more and no less.
That limits the damage when something goes wrong. If an account is hijacked or someone makes a mistake, the impact reaches no further than what that person had access to. It also stops sensitive data from lying around with people who have nothing to do with it.
Access management needs maintenance. People change roles or leave the company, and their access has to move with them. Old accounts that stay open, or permissions that nobody tidies up any more, are a favourite way in for misuse.
