# Privileged Account Access Review Template

## Review Campaign Details

| Field | Value |
|-------|-------|
| Campaign Name | Q___ 20__ Privileged Access Review |
| Review Period | ___/___/20__ to ___/___/20__ |
| Due Date | ___/___/20__ |
| Scope | All privileged accounts |
| Reviewer | _______________ |

## Review Summary

| Metric | Count |
|--------|-------|
| Total Accounts in Scope | |
| Accounts Reviewed | |
| Accounts Certified (Approved) | |
| Accounts Revoked | |
| Accounts Flagged for Investigation | |
| Overdue Reviews | |

## Review Decisions Log

| # | Username | Platform | Privilege | Decision | Justification | Date |
|---|----------|----------|-----------|----------|---------------|------|
| 1 | | | | Approve/Revoke/Flag | | |
| 2 | | | | | | |
| 3 | | | | | | |

## Findings and Remediation

### Finding 1
- **Description**:
- **Risk Level**: Critical / High / Medium / Low
- **Affected Accounts**:
- **Remediation Action**:
- **Due Date**:
- **Assigned To**:

### Finding 2
- **Description**:
- **Risk Level**:
- **Affected Accounts**:
- **Remediation Action**:
- **Due Date**:
- **Assigned To**:

## Compliance Evidence

- [ ] Review campaign initiated with formal notification
- [ ] All accounts in scope were assigned to reviewers
- [ ] Reviewers completed decisions with documented justification
- [ ] Revoked accounts were disabled within SLA
- [ ] Credentials were rotated for certified accounts
- [ ] Review report signed off by security leadership
- [ ] Evidence archived for audit retention period

## Sign-Off

| Role | Name | Signature | Date |
|------|------|-----------|------|
| Reviewer | | | |
| Security Manager | | | |
| Compliance Officer | | | |
