...
Periodic Review of Access Privileges
Support ('superadministrator') access to customer environments is reviewed and documented quarterly.
Engineering access to the hosting infrastructure is reviewed periodically by management. Support access to customer environments is managed periodically by management as well.
Periodic Security Training
...