Data Governance Access Review

Use this skill to convert a data governance, classification, access controls, least privilege, approvals, retention, audit logs, and break-glass policy question into a concrete artifact with owners, gates, metrics, and recovery paths.

Workflow

1. Identify data domains, sensitive fields, actors, access purpose, retention requirements, owner teams, tooling, and audit expectations.
2. Read references/data-governance-access-patterns.md.
3. Classify data by sensitivity, residency, source, purpose, retention, customer visibility, and allowed access roles.
4. Define access request workflow, approval policy, least privilege, expiration, review cadence, audit log, break-glass, and offboarding.
5. Produce governance plan, state machine, decision table, event schema, access checklist, and exception review policy.

When not to use

• Do not use for generic advice the base model already handles without this skill's specific artifact contract.

Guardrails