In the past, companies were content to ignore access reviews. The believe was that providing the right access to the right people is sufficient.