How often should security teams conduct a review of the privileged access that a user has to sensitive systems?
On a periodic basis
On a daily basis
When a User changes roles
When a User leaves the organisation