Question 91 · 1449 in bank
A third-party vendor has offered to perform user access provisioning and termination. Which of the following control accountabilities is BEST retained within the organization?
Show answer
Answer: C
Explanation
The accountability for authorizing user access requests should be retained within the organization. This is a critical control as it ensures that only authorized users are granted access to the organization's systems and data. While a third-party vendor may assist with user access provisioning and termination, the organization should maintain oversight and control over the authorization process to ensure that access is only granted to those who require it to perform their job functions. Additionally, the organization should review access control lists to ensure that access rights are appropriate and up to date.
Source: Adapted from community discussion — john_boogieman