Which guideline governs how access rights are granted and managed?

Which guideline governs how access rights are granted and managed?

• A. Background Check
• B. Verification of a new employee's history
• C. Access Standards
• D. Deactivation Policies

Answer: (C)

Access governance defines how access rights are granted, modified, and revoked across systems. This guideline sets the rules for approvals, role mappings, baseline permissions, and ongoing reviews, ensuring the principle of least privilege and consistent enforcement. Therefore, Access Standards is the best choice because it specifies the criteria, processes, and controls used to determine who gets access, to what resources, and under what conditions, covering the lifecycle from request through revocation. Background checks and verification of a new employee’s history relate to onboarding and identity verification, not the overarching policy for granting and managing access. Deactivation policies deal with disabling access when someone leaves or changes roles, which is part of lifecycle management but not the guideline that governs how access rights are granted and managed.

Access governance defines how access rights are granted, modified, and revoked across systems. This guideline sets the rules for approvals, role mappings, baseline permissions, and ongoing reviews, ensuring the principle of least privilege and consistent enforcement. Therefore, Access Standards is the best choice because it specifies the criteria, processes, and controls used to determine who gets access, to what resources, and under what conditions, covering the lifecycle from request through revocation.

Background checks and verification of a new employee’s history relate to onboarding and identity verification, not the overarching policy for granting and managing access. Deactivation policies deal with disabling access when someone leaves or changes roles, which is part of lifecycle management but not the guideline that governs how access rights are granted and managed.