CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following provides the BEST evidence that a user account has been appropriately authorized?

A Notification from human resources that the account is active
B Formal approval of the account by the user's manager
C User privileges matching the request form
D An email from the user accepting the account

Explanation

Formal approval by the user’s manager provides evidence that the accountable business owner has authorized the account. The manager is responsible for validating that the user has a legitimate business need for access.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1237

Community Discussion