Defines user identity changes and notifications.

Defines user identity changes and notifications.

• A. Communication policy
• B. Data classification policy
• C. Emerging security solutions
• D. Future scalability requirements

Answer: (A)

Defining how and when to notify stakeholders about changes to a user's identity is covered by a communication policy. This policy lays out who must be informed (such as security teams, administrators, and, when appropriate, the user), what details are included in the notification (like the type of identity change, timestamps, and affected services), and how and when the notifications are delivered (secure channels, escalation paths, and timing triggers for creation, modification, or deactivation of identities). It also ensures there’s an audit trail showing when notifications were sent and to whom, which supports accountability and incident response. Data classification policy focuses on labeling data by sensitivity and applying handling rules, not on how identity events are communicated. Emerging security solutions refer to new tools or approaches in security, not the process for notifying about identity changes. Future scalability requirements concern capacity and performance planning, not notification procedures for identity events.

Defining how and when to notify stakeholders about changes to a user's identity is covered by a communication policy. This policy lays out who must be informed (such as security teams, administrators, and, when appropriate, the user), what details are included in the notification (like the type of identity change, timestamps, and affected services), and how and when the notifications are delivered (secure channels, escalation paths, and timing triggers for creation, modification, or deactivation of identities). It also ensures there’s an audit trail showing when notifications were sent and to whom, which supports accountability and incident response.

Data classification policy focuses on labeling data by sensitivity and applying handling rules, not on how identity events are communicated. Emerging security solutions refer to new tools or approaches in security, not the process for notifying about identity changes. Future scalability requirements concern capacity and performance planning, not notification procedures for identity events.