SPECIMEN. Invented organisation, invented procedure, for testing only.
# Kestrel Bay Franchise Group: Access Control Procedure (ACP), version 4
ACP-3 Leaver access. A leaver's franchise portal account is disabled no later than the first business day after the termination date. Queensland public holidays count as non-business days.
ACP-5 Quarterly access review. The system owner reviews every enabled franchise portal account each quarter and signs the review.
ACP-6 Deficiencies. Any control exception found while answering an auditor is reported to the CISO the same day; records are given to auditors exactly as held.
