CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ37

VerifiedIncident Management

An organization has had multiple cases of privileged users abusing their access. Which of the following processes would be MOST useful for identifying these violations?

Explanation

Reviewing logs reveals the actions performed by privileged accounts and can expose unauthorized, inappropriate, or policy-violating use of elevated access.

Community Discussion

No comments yet. Be the first to start the discussion!