ISC2 CISSP (Certified Information Systems Security Professional)Identity and Access Management (IAM)Easy
A large multinational corporation is implementing a new global identity and access management (IAM) system. The security architect is tasked with ensuring that access reviews are conducted periodically and that dormant accounts are promptly disabled. Which aspect of the identity and access provisioning lifecycle is being addressed?
- AReview
- BProvisioning
- CMaintenance
- DRevocation
Show answer & explanationAnswer & explanation
Correct answer: A. Review
The scenario explicitly mentions 'access reviews' and 'dormant accounts are promptly disabled' as part of periodic checks. This directly corresponds to the 'Review' phase of the IAM lifecycle, where access rights are regularly scrutinized for continued appropriateness.
Why the other options are wrong
- B. Provisioning involves creating and granting initial access to users, which is not the focus here.
- C. Maintenance is a broader term that encompasses ongoing management but 'review' is a more specific and accurate fit for the activities described.
- D. Revocation is the process of removing access or disabling accounts, but the described activity is the *trigger* (review) for identifying accounts to be revoked.
Identity and Access Provisioning Lifecycle - Review
The Review phase involves periodically evaluating existing user access rights and account statuses to ensure they remain appropriate, necessary, and compliant with policies.
- Ensures 'least privilege' and 'need-to-know' are maintained.
- Identifies dormant or unauthorized access.
- Often involves managers or data owners attesting to access validity.
Memory trick: PRRM: People Regularly Review Rights.