Company has established an Access Management Policy to define the implementation of access controls.