Why it is important to conduct Access Review

One of the key tenets of Zero Trust Security is the Principle of Least Privilege where users should be given the minimum levels of access/permissions – needed to perform his/her job functions.

Core Principles of Zero Trust.png — **Source**: Understanding Zero Trust Security by Atlassian

However, "privilege creep" can happen when permissions granted temporarily are never revoked subsequently.

Many risk management teams have been reiterating the importance of regular access reviews especially for SaaS solutions on the Cloud.

By doing regular access reviews, the benefits are

Reduced cyber attack surface
Meet compliance requirements
Minimise unnecessary information leaks/data breaches
Safeguard on human errors
Reducing license wastage

While there are 3rd party access review solutions in the market, those generic solutions are not tailored to Jira Cloud. An app that incorporates Jira's permission access model and integrates seamlessly within Jira will be a more sustainable solution.