SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-review-account-access

How often does NCSC suggest reviewing who has access to important accounts?

Every few months.

Start playing free

  1. Every ten years
  2. Every few months ✔
  3. Only after a breach

Why: Staff, suppliers and contractors come and go, and old accounts often stay active. Regular reviews remove access nobody needs.

Huh, didn't know that: NCSC says those accounts often stay active without anyone noticing.

The dad joke
Why did the employee get fired from the calendar factory? He took a day off.
Like this card?
Play the game

References

Answer: Every few months. Staff, suppliers and contractors come and go, and old accounts often stay active. Regular reviews remove access nobody needs.

  1. NCSC: Secure your important online accounts www.ncsc.gov.uk/collection/small-organisations-guide-to-cyber-security/secure-your-important-online-accounts
    Make it a habit to review who has access to important accounts every few months
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyThe UK NCSC suggests combining what to make a strong, memorable password?Security & PrivacyHow does a password manager help against a fake login page?Security & PrivacyAn account only offers text message codes for two-step verification. What does NCSC say?

That's stuff everyone should know.