How often are accounts and associated access rights monitored? What policies apply to them?

For DataverseNL:

Access to the service is possible via SURFconext using the institutional account, or via local accounts. Permissions for end users are granted by the local administrator of the institution that makes use of DataverseNL. 

There are as few users as possible within DANS with a superuser account. The Information Systems Officer keeps track of this. DANS uses two-factor authentication for their staff members.

As soon as a DANS employee leaves the company, the account will be deleted.

For the DANS Data Stations:

Access to the service is possible via SURFconext using the institutional account, or via a GitHub, ORCID, or Google account. All end users will automatically get a DANS contributor role. 

For data curation the data curation team within DANS has a datamanager role. 

There are as few users as possible within DANS with a superuser account. The Information Systems Officer keeps track of this. DANS uses two-factor authentication for their staff members.

As soon as a DANS employee leaves the company, the account will be deleted.