Update access management policy roles and remove control references

Cynthia Millerrequested to merge
duo-edit-20260731-002131 into main

Updates to content/handbook/security/security-and-technology-policies/access-management-policy.md:

Roles & Responsibilities table:

  • Updated Security Assurance responsibility to "Responsible for the continuous monitoring of adherence to this policy"
  • Updated row to "Business or Technical System Owners AND All Team Members | Responsible for adherence to this policy and related standards"
  • Removed Team Members row

Access requests and reviews:

  • Removed (AC-2) from "Access requests are opened for all new or changing access."
  • Removed (AC-2) from "Access requests are approved prior to making access changes."
  • Removed (AC-2, AC-6(7)) from "Access requests and reviews are documented."

Access revocation:

  • Removed (AC-2(3)) from "Access is deprovisioned upon cessation of employment."

Job transfers:

  • Removed (AC-2, AC-2(3)) from "Access is deprovisioned or provisioned upon job transfer, as appropriate for the transfer."

Access reviews:

  • Removed (AC-6(7)) from "Access reviews are performed to confirm existing access."

Merge request reports