PSI Services interview question

How would you perform an access review?