Access certification reviews is a cybersecurity control or practice. It supports this objective: requires accountable owners to periodically confirm that access remains appropriate. The implementation should still be validated against the organization's risk, architecture, legal obligations and operating constraints, then adapted rather than copied unchanged between environments.

NIST Cybersecurity Framework 2.0: https://www.nist.gov/cyberframework