Explains access recertification
Periodic review of access rights by someone other than the holder, with unconfirmed access revoked (ISO/IEC 27002:2022 5.18; PCI DSS v4.0.1 Req. 7.2.4).
Can AI do this?
AI does this well Most of the tested AI models master this. 4 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 100% | Mastered |
| gemini-3.5-flash-lite | Low cost | 100% | Mastered |
| gpt-6-luna | Low cost | 100% | Mastered |
| claude-haiku-5-5 | Low cost | 100% | Mastered |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: Periodic review of access rights by someone other than the holder, with unconfirmed access revoked (ISO/IEC 27002:2022 5.18; PCI DSS v4.0.1 Req. 7.2.4).
How it is assessed: Answers a written question on the access recertification correctly
Related knobits
Needed for
- S-502 Recognises an access recertification by the holder
- S-507 Recognises an overdue recertification
- S-508 Recognises privileged access outside recertification
- S-510 Recognises rejected access still active
- S-532 Revokes access a review did not confirm
- S-533 Assigns an independent reviewer to an access recertification
All 16 knobits of Monitor and audit access.
Source: Practice the stage 5 reference and review checklist rest on