Access certification reviews is a cybersecurity control or practice. It supports this objective: requires accountable owners to periodically confirm that access remains appropriate. In practice, document the business and security objective, the system boundary, the owner and the evidence that will show the control is operating as intended.

NIST Cybersecurity Framework 2.0: https://www.nist.gov/cyberframework