Standard Four: Data Access

4.1. The organisation maintains a current record of staff and their roles

4.2. Organisation assures good management and maintenance of identity and access control for its networks and information systems