ISACA Certified Information Systems Auditor (CISA) ExamDomain 2: Governance and Management of ITEasy
An organization is updating its human resources management practices related to IT. The CISA reviews the onboarding process for new IT employees and notes that while background checks are conducted, there is no formal process for revoking access rights immediately upon an employee's termination. Which of the following is the MOST critical risk this omission poses?
- ADifficulty in tracking software license usage.
- BIncreased administrative burden on IT helpdesk staff.
- CPotential for unauthorized access to sensitive systems and data.
- DDelayed onboarding of new employees due to resource allocation.
Show answer & explanationAnswer & explanation
Correct answer: C. Potential for unauthorized access to sensitive systems and data.
Failure to promptly revoke access rights for terminated employees creates a critical window of opportunity for unauthorized access, potentially leading to data breaches, system compromise, or malicious activity, which is a severe security risk.
Why the other options are wrong
- A. Software license tracking is a separate issue from immediate access revocation upon termination.
- B. While there might be some administrative impact, the primary risk is security.
- D. Delayed onboarding relates to new hires, not the offboarding process for terminated employees.
Access Revocation
Access revocation is the immediate removal of all system and data access rights for an employee upon their termination or change in role, as a critical security control measure.
- Prevents unauthorized access.
- Reduces insider threat risk.
- Must be a timely and documented process.
Memory trick: Secure the 'EXIT' to prevent unauthorized access.