← ISO 27001 Annex A in plain English

A.5.18 A.5

Organizational / A.5.18

Granting, reviewing, and withdrawing access rights

Think of it likeTaking the shed key back once the decking is finished.

In plain English

The family grants access when it is needed, checks periodically that it is still needed, and takes it back when it is not.

Related CSF and CIS controls (unofficial mapping)