NERC CIP CIP-004 R4.3: CIP-004-7 R4.3: Verify user accounts and privileges every 15 calendar months

What does CIP-004 R4.3 require?

For electronic access, verify at least once every 15 calendar months that all user accounts, account groups or role categories and their specific privileges are correct and are those the entity determines necessary.