Generate a complete Access Control Policy covering RBAC, least privilege, MFA, privileged access management, user provisioning, access reviews, and remote access controls. Maps to SOC 2 CC6, ISO 27001 Annex A.9, HIPAA §164.312, PCI DSS Req 7 & 8.
AI-generated starting point. Have your legal counsel review before use.