{"product_id":"behorighetsrevision-atkomstgranskning-2026-2027-excel-word-pdf","title":"Access Review \u0026 Permission Audit 2026\/2027 – Excel, Word \u0026 PDF","description":"\u003csection class=\"mb-product-content\" lang=\"en\"\u003e\n\u003cp\u003e\u003cstrong\u003eAccess Audit \u0026amp; Periodic Access Review 2026\/2027\u003c\/strong\u003e is a professional template package for system owners, IT departments, information security officers, and small businesses that want to regularly verify that existing IT access rights are still justified. The package combines an \u003cstrong\u003eExcel-based access register with a dashboard\u003c\/strong\u003e, audit logs, a role and access matrix, an action plan, a documented audit procedure (SOP), a separate user guide, and an English working reference.\u003c\/p\u003e\n\n\u003cnav aria-label=\"About the document template\"\u003e\u003cp\u003e\u003cstrong\u003eAbout the document template:\u003c\/strong\u003e \u003ca href=\"#mb-contents\"\u003eWhat’s included\u003c\/a\u003e · \u003ca href=\"#mb-excel\"\u003eExcel\u003c\/a\u003e · \u003ca href=\"#mb-steps\"\u003eStep by step\u003c\/a\u003e · \u003ca href=\"#mb-law\"\u003eRules and limitations\u003c\/a\u003e · \u003ca href=\"#mb-faq\"\u003eFAQ\u003c\/a\u003e · \u003ca href=\"#mb-sources\"\u003eOfficial sources\u003c\/a\u003e\u003c\/p\u003e\u003c\/nav\u003e\n\u003caside style=\"background:#E9F4ED;border-left:4px solid #22784A;padding:16px;border-radius:7px\"\u003e\u003cstrong\u003eSource and technically verified: October 12, 2026.\u003c\/strong\u003e Version 1.0 for 2026\/2027. The date refers to the review of the templates and their technical functions, not individual legal certification. The product is an administrative documentation aid, not an integrated IAM solution or a guarantee of regulatory compliance.\u003c\/aside\u003e\n\u003ch2 id=\"mb-contents\"\u003eWhat is included in the package\u003c\/h2\u003e\n\n\u003ctable\u003e\n\n\u003cthead\u003e\u003ctr\u003e\n\n\u003cth\u003eDelivery\u003c\/th\u003e\n\n\u003cth\u003eContent\u003c\/th\u003e\n\n\u003cth\u003eFormat\u003c\/th\u003e\n\n\n\u003c\/tr\u003e\u003c\/thead\u003e\n\n\u003ctbody\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eAccess register \u0026amp; dashboard\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eSeven worksheets with 200 access entries, 200 audit lines, 160 actions, 100 role matrix lines, instructions, and a separate dummy example.\u003c\/td\u003e\n\n\u003ctd\u003eExcel (XLSX)\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eAudit log\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eScope, access checks, deviations, risk assessment, system owner decisions, and signing.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eRole and access matrix\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eDefinition of job roles, expected minimum access, system owners, privileges, and segregation of duties.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eAction and follow-up\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eDocumentation of confirmed deviations, action owners, deadlines, actual changes, and technical verification.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eAccess Audit – SOP\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eInternal procedure for risk-based audit frequency, evidence collection, decision-making, and follow-up.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eDetailed user guide\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eStep-by-step instructions, field explanations, common mistakes, data protection, archiving, risks, and primary sources.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eAccess Recertification\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eEnglish working reference for audits and decision-making, intended for use in Swedish operations.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\n\u003c\/tbody\u003e\n\n\n\u003c\/table\u003e\n\n\u003cp\u003e\u003cstrong\u003eTotal of 13 files:\u003c\/strong\u003e six DOCX, six searchable A4-PDFs, and one XLSX. The ZIP package contains only delivery files – no scripts, screenshots, or QA files.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-excel\"\u003eThe Excel tool: access rights, audits, and actions\u003c\/h2\u003e\n\n\u003cul\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eOverview:\u003c\/strong\u003e number of access rights, high-risk items, unreviewed rights, overdue checks, open and overdue actions, and registered audit decisions.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eAccess rights:\u003c\/strong\u003e account\/access reference, system, owner, actual access, risk level, needs assessment, next internal audit, and duplicate checking of access IDs.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eAudits:\u003c\/strong\u003e document decisions to \u003cem\u003eKeep, Restrict, Revoke, or Investigate\u003c\/em\u003e, decision-maker, risk, evidence, and follow-up.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eActions:\u003c\/strong\u003e link actions to access IDs, set responsibility, deadline, implementation, and verification. Status distinguishes between open, overdue, and verified as closed.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eRole matrix:\u003c\/strong\u003e 100 prepared rows for desired role-based access and responsible system owners.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eInstructions and examples:\u003c\/strong\u003e user support within the workbook itself as well as separate dummy examples that do not affect the live register.\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e Excel does not fetch access rights from Microsoft 365, Entra ID, Google Workspace, VPN, or other systems. The dashboard is based solely on registered values. Technical changes should only be marked as verified after a qualified person has checked the actual system state. No email, SMS, automatic account blocking, or automatic access revocation is included.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-steps\"\u003eHow to use the access audit\u003c\/h2\u003e\n\n\u003col\u003e\n\n\u003cli\u003eDetermine which systems, account types, and business areas are included. Appoint system owners, technical executors, and auditors.\u003c\/li\u003e\n\n\u003cli\u003eRetrieve a current and dated list of assigned rights from the respective system. Save the supporting documentation securely.\u003c\/li\u003e\n\n\u003cli\u003eRegister access rights in Excel and compare them with the role matrix, active employment\/assignments, business requirements, and any specific risks.\u003c\/li\u003e\n\n\u003cli\u003eSpecially audit privileged accounts, shared technical accounts, external access, and time-limited rights.\u003c\/li\u003e\n\n\u003cli\u003eMake and document authorized decisions: keep, restrict, revoke, or investigate. An empty decision is not an approval.\u003c\/li\u003e\n\n\u003cli\u003eCreate an action ticket when rights need to be changed. Appoint a responsible person and set an internal deadline.\u003c\/li\u003e\n\n\u003cli\u003eVerify the actual system change with relevant documentation and decide on closure. Plan the next risk-based audit.\u003c\/li\u003e\n\n\n\u003c\/ol\u003e\n\n\u003ch2\u003eWho is this package for?\u003c\/h2\u003e\n\n\u003cp\u003eIt is suitable for small and medium-sized enterprises, IT\/HR managers, system owners, information security functions, associations, and organizations with multiple SaaS systems, cloud services, and internal accounts. It is particularly useful for organizations that already have onboarding and offboarding procedures but lack an independent, documented periodic check of existing access rights.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-law\"\u003eGDPR, information security, and legal limitations\u003c\/h2\u003e\n\n\u003cp\u003eThe Swedish Authority for Privacy Protection (IMY) guidelines on access control explain that organizations need to limit access based on need, document needs and risk analyses, and regularly follow up on user access rights. When processing personal data, for instance, the basic principles of GDPR and Article 32 on appropriate security can be relevant. For healthcare providers and other specifically regulated operations, additional obligations may apply.\u003c\/p\u003e\n\n\u003caside style=\"background:#FFF4D9;border-left:4px solid #C39335;padding:16px;border-radius:7px\"\u003e\u003cstrong\u003eNo universal statutory audit frequency:\u003c\/strong\u003e The template does not dictate that all access rights must be audited every month, quarter, or year. Frequency and scope must be determined based on risk assessment, current sector requirements, agreements, and the organization's security management. The template does not replace audits according to ISO 27001, NIS2\/the Cybersecurity Act's applicable rules, or technical controls in an IAM system.\u003c\/aside\u003e\n\u003cp\u003eAccess and account registers can themselves be sensitive. Avoid passwords, API keys, personal identification numbers, and authentication secrets in the files. Store them under access control and apply relevant internal retention policies. For sensitive healthcare systems, security-sensitive operations, or complex personal data issues, a specialist should be consulted.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-faq\"\u003eFrequently Asked Questions\u003c\/h2\u003e\n\n\u003ch3\u003eWhat is the difference from IT onboarding and IT offboarding?\u003c\/h3\u003e\n\n\u003cp\u003eIT onboarding documents new assignments, and IT offboarding documents the termination of access. Access auditing reviews whether already assigned rights are still needed and correct.\u003c\/p\u003e\n\n\u003ch3\u003eCan I use Excel as an access matrix?\u003c\/h3\u003e\n\n\u003cp\u003eYes. A separate role matrix makes it possible to document expected rights, but it does not contain an automatic technical comparison against the systems.\u003c\/p\u003e\n\n\u003ch3\u003eHow many entries can it fit?\u003c\/h3\u003e\n\n\u003cp\u003e200 access entries, 200 audits, 160 actions, and 100 role matrix entries are prepared in version 1.0.\u003c\/p\u003e\n\n\u003ch3\u003eDoes Excel automatically close unnecessary accounts?\u003c\/h3\u003e\n\n\u003cp\u003eNo. Revocation must be performed by an authorized person in the actual system and then verified separately.\u003c\/p\u003e\n\n\u003ch3\u003eDo access rights have to be audited every quarter?\u003c\/h3\u003e\n\n\u003cp\u003eThere is no universal rule for all organizations and systems. Decide on intervals based on risk and check specific obligations for your operation.\u003c\/p\u003e\n\n\u003ch3\u003eDoes the template meet GDPR, NIS2, or ISO 27001?\u003c\/h3\u003e\n\n\u003cp\u003eNo, not in itself. The documents can support broader security work but are not a certification or a complete solution for regulatory compliance.\u003c\/p\u003e\n\n\u003ch3\u003eWhat languages and formats are included?\u003c\/h3\u003e\n\n\u003cp\u003eSwedish main templates and Excel, as well as an English working reference for Swedish conditions. The Word files are editable, and the PDF files are searchable print\/reference versions.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-sources\"\u003eOfficial sources and related templates\u003c\/h2\u003e\n\n\u003cul\u003e\n\n\u003cli\u003e\n\n\u003ca href=\"https:\/\/www.imy.se\/verksamhet\/dataskydd\/det-har-galler-enligt-gdpr\/informationssakerhet\/behorighetsstyrning\/\"\u003eIMY – Access control\u003c\/a\u003e.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003ca href=\"https:\/\/www.imy.se\/verksamhet\/dataskydd\/dataskydd-pa-olika-omraden\/vard\/informationssakerhet--for-vardgivare\/tilldelning-av-behorighet-till-uppgifter-om-patienter--for-vardgivare\/\"\u003eIMY – Access assignment and follow-up in healthcare\u003c\/a\u003e.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003ca href=\"\/en\/products\/it-onboarding-behorighetsbestallning-2026-2027-excel-word-pdf\"\u003eIT Onboarding \u0026amp; Access Requests\u003c\/a\u003e.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003ca href=\"\/en\/products\/it-offboarding-behorighetsavslut-2026-2027-excel-word-pdf\"\u003eIT Offboarding \u0026amp; Access Termination\u003c\/a\u003e.\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eDelivery:\u003c\/strong\u003e Digital ZIP download after the file has been processed in the store's Digital Products delivery app. No physical items. Source and technically verified October 12, 2026; no individual legal advice is included.\u003c\/p\u003e\n\n\u003cp class=\"mb-product-related-guide\"\u003e\u003cstrong\u003ePractical guidance:\u003c\/strong\u003e Read our \u003ca href=\"\/en\/blogs\/foretag\/behorighetsgranskning-atkomstgranskning-checklista\"\u003eguide to access audits, access control, and follow-up with a checklist\u003c\/a\u003e for an overview of the workflow before using the templates.\u003c\/p\u003e\u003c\/section\u003e","brand":"Svenska Dokumentmallar","offers":[{"title":"Default Title","offer_id":55710415225174,"sku":"BEHORIGHETSREVISION-2027","price":79.0,"currency_code":"SEK","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0827\/2373\/3846\/files\/behorighetsrevision-atkomstgranskning-2027-hero.png?v=1791784777","url":"https:\/\/mallbutiken.se\/en\/products\/behorighetsrevision-atkomstgranskning-2026-2027-excel-word-pdf","provider":"Mallbutiken","version":"1.0","type":"link"}