CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ172

Risk Response and Reporting

Which of the following controls would BEST mitigate the risk associated with excessive access privileges?

  • A Frequent password expiration
  • B Segregation of duties
  • C Entitlement reviews
  • D Review of user access logs
Explanation

Entitlement reviews periodically confirm that each user’s permissions remain necessary for their role and remove excessive or obsolete access.

Community Discussion

No comments yet. Be the first to start the discussion!