Access Control List

An access control list is a log of security assignments relating to the ability of users to have permissions to use an entity’s systems. This list describes who has access to what systems and what level of permissions the user has for each system. This list should be maintained and updated annually in order to help control unnecessary access into the company network.

Many auditors check to make sure the Access Control List is being maintained according to the company’s written policy, with the preference that it is being looked at each year.