# Control 4.2: Site Access Reviews and Certification - Screenshot Specifications

## Required Screenshots

| Filename | Portal | Navigation Path | What to Capture |
|----------|--------|-----------------|-----------------|
| `01-spac-data-governance.png` | SPAC | Reports → Data access governance | Governance dashboard |
| `02-spac-permissions-report.png` | SPAC | Data governance → Permissions | Permissions snapshot |
| `03-spac-site-lifecycle.png` | SPAC | Policies → Site lifecycle management | Lifecycle policies |
| `04-spac-attestation-policy.png` | SPAC | Site lifecycle → Attestation | Attestation policy config |
| `05-spac-inactive-sites.png` | SPAC | Site lifecycle → Inactive sites | Inactive site report |
| `06-entra-access-reviews.png` | Entra | Identity Governance → Access reviews | Access review list |
| `07-entra-review-create.png` | Entra | Access reviews → Create | Review creation |
| `08-entra-review-results.png` | Entra | Access review → Results | Review decisions |

## Notes for Verification

- Attestation policies are configured
- Site owners receive attestation requests
- Access reviews cover SharePoint groups
- Inactive sites are identified

---

[Back to Control 4.2](../../controls/pillar-4-sharepoint/4.2-site-access-reviews-and-certification.md)
