CISSP: Certified Information Systems Security Professional

Question

An organization wants to ensure that employees who move to another department within the organization do not keep access privileges from their previous department. To accomplish this, the organization has implemented role-based access control (RBAC). Which additional measure is MOST important for successfully limiting excessive access privileges?

Explanation

Line-manager review of assigned roles verifies that each employee’s roles match their current duties after a departmental transfer. This directly identifies and removes roles retained from a former position, enforcing least-privilege access.

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ207

Community Discussion