Access to Cigna’s information system is managed using a role-based access control methodology, which defines the access a user receives to Cigna’s information systems based on job function and includes a process to validate that user access rights remain appropriate over time.