What term describes the periodic assessment of who has access rights to systems and data?

What term describes the periodic assessment of who has access rights to systems and data?

• A. Entitlement Reviews
• B. Access Logging
• C. Identity Repositories
• D. IAM Systems

Answer: (A)

Entitlement reviews are the periodic attestations of who should have access to systems and data. In this process, data owners or managers review current access rights and certify whether each user’s permissions are appropriate, often revoking privileges that are no longer needed to enforce least privilege and support compliance. This practice, sometimes called access recertification, directly targets verifying and adjusting who has access, rather than just recording events or storing identities. Access logging records who accessed what and when, but it doesn’t determine or certify who should have access. Identity repositories are directories that store identities and attributes, not the ongoing evaluation of granted rights. IAM systems provide the tools to manage identities and permissions, but the periodic assessment itself is specifically the entitlement review process.

Entitlement reviews are the periodic attestations of who should have access to systems and data. In this process, data owners or managers review current access rights and certify whether each user’s permissions are appropriate, often revoking privileges that are no longer needed to enforce least privilege and support compliance. This practice, sometimes called access recertification, directly targets verifying and adjusting who has access, rather than just recording events or storing identities.

Access logging records who accessed what and when, but it doesn’t determine or certify who should have access. Identity repositories are directories that store identities and attributes, not the ongoing evaluation of granted rights. IAM systems provide the tools to manage identities and permissions, but the periodic assessment itself is specifically the entitlement review process.