This document outlines a governance model for conducting access rights reviews. It establishes shared ownership between executive leadership, finance, compliance, operations, and business units. The model involves periodic reviews of user access across key systems to ensure compliance, enforce least privilege, and reduce risks. An audit team will coordinate the process and include representatives from finance, compliance, and IT. The document also provides an initial schedule and review process for establishing and piloting the new access management policy.