Last reviewed and updated | October 20, 2026
Reviewer rubber-stamping
Approving or certifying user access in bulk without enough context to make an informed decision.
Why it matters
Rubber-stamped reviews produce weak audit records and leave risky access in place, which can increase the possibility of privilege escalation attacks succeeding.
How it works
- Give reviewers context (last login, MFA status, role, access path)
- Use a risk-informed queue so healthy access is approved in bulk and anomalies are investigated
- Review each user and application pair once