CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ6

VerifiedRisk Response and Reporting

An audit finds that several terminated employee accounts still retain access. Which of the following should be the FIRST step to mitigate the risk?

Explanation

Access for terminated employees should be disabled immediately to contain the active risk of unauthorized use. Risk assessment, root-cause analysis, and access-control policy improvements are subsequent corrective activities.

Community Discussion

No comments yet. Be the first to start the discussion!