CIS IG1 Control 6.2 – Establish an Access Revoking Process by Heath Gieson   If access granting is where intent is established, access revoking is where discipline is revealed. Most organizations do not struggle with revoking access because they disagree with the idea. They struggle because no one clearly owns the moment when access should end. Someone leaves the company. A role changes. A project wraps up. Everyone assumes the system will catch up on its own. It rarely does. That gap is...