Internal auditors regularly look at access governance. To prepare yourself