ISC2 Certified in Cybersecurity (CC)Access Controls ConceptsEasy
A new employee, Jane, needs access to specific HR documents and the company's internal wiki. Her manager submits a request detailing the resources she needs. Which phase of the access control lifecycle is being performed when Jane is granted these specific permissions?
- AProvisioning
- BReviewing
- CAuditing
- DDeprovisioning
Show answer & explanationAnswer & explanation
Correct answer: A. Provisioning
Provisioning is the process of setting up and granting users access to necessary resources and systems based on their roles and responsibilities. In this scenario, Jane is being granted new permissions.
Why the other options are wrong
- B. Reviewing involves periodic checks of existing access rights.
- C. Auditing is the examination of system logs and activities for security purposes.
- D. Deprovisioning is the removal of access when an employee leaves or changes roles.
Provisioning
The process of creating, maintaining, and managing user accounts and access rights to organizational resources.
- Grants initial access based on role.
- Ensures users have necessary permissions.
- Part of the identity and access management (IAM) lifecycle.
Memory trick: Life's a cycle, access is vital.