CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ201

VerifiedIdentity and Access Management (IAM)

An information security consultant has been asked to recommend measures for a small business to protect access to information stored on network drives. The small business supports several government agencies that manage highly sensitive information. Which of the following recommendations is BEST to achieve this objective?

Explanation

Access management policies and procedures directly control who may access network-drive information and under what conditions, including authorization, account provisioning, periodic access review, and timely removal of access. Monitoring systems or a SOC can help detect improper access, but they do not themselves establish the required access controls.

Community Discussion

No comments yet. Be the first to start the discussion!