How does the policy handle the management of access rights?
The policy outlines a process for granting, reviewing, and revoking access rights based on job functions, ensuring that only authorized personnel can access sensitive information.