The access list nobody has reviewed since the audit
The scenario:
You went through a client's compliance audit eight months ago and cleaned up every stale account and orphaned permission across their environment. It was thorough, and it was a snapshot. Nobody scheduled the next review, so the list has been quietly drifting back toward messy ever since, one new hire and one departed contractor at a time. Nobody decided to let it slip. It happened the same way any list drifts once the person who cleaned it moves on to the next fire.
An audit is a moment. Access hygiene is a habit, and habits need a schedule, not a memory of once doing it right. The client will assume the clean state from the audit still holds, until an incident response turns up an account that should have been closed a year ago.
The prompt:
You are building a quarterly access review that actually happens.
Context: [the access review checklist from your last compliance audit, and how long it's been since it last ran for a given client]
Build:
A quarterly recurring version of the same review
Scaled down to the ten minutes it takes to catch drift early, not the half day it takes to fix it after a year of neglect