Red Hat Standard:

• The offering team will review access to repositories at least annually.

Evidence:

• Review results, including date review performed and any changes made.

More information about this practice can be found here.