Policy-based triggering of revision of access control information

A computer program product for facilitating a maintenance of access control information for controlling access to one or more resources of an information technology system by one or more subjects, the computer program product comprising:

• one or more computer-readable tangible storage medium and program instructions stored on at least one of the one or more tangible storage medium, the program instructions executable by a processor, the program instructions comprising:
• program instructions to retrieve one or more trigger policies each based on one or more policy parameters relating to the resources, the subjects and the access to the resources by the subj ects;
• program instructions to retrieve the policy parameters;
• program instructions to retrieve evaluate the trigger policies according to the corresponding policy parameters;
• program instructions to determine a trigger indicator according to a result of evaluating the trigger policies;
• and
• program instructions to output an indication of the trigger indicator to trigger a revision of the access control information in response to the trigger indicator, the revision comprising a mining activity for mapping the subjects to the resources and a possible update of the access control information based on a result of the mining activity.