IAM.1.05- Adding-clarifying-language-to-control-statement

Why is this change being made?

Additional language added to control statement to clarify that shared credentials passwords would be rotated as well as removing any unnecessary access (post transfer)

[Issue1266] (https://gitlab.com/gitlab-com/gl-security/compliance/compliance/issues/1266)

Does this MR meet the acceptance criteria?

Conformity

• Added description to this MR explaining the reasons for the proposed change, per say-why-not-just-what