Which guideline governs the approval of access to resources based on identity verification?

Which guideline governs the approval of access to resources based on identity verification?

• A. Background Check
• B. Verification of a new employee's history
• C. Access Standards
• D. Deactivation Policies

Answer: (C)

Access standards define the rules that turn a verified identity into concrete access rights. They specify who is allowed to reach which resources, under what conditions, and what authentication and authorization requirements apply. This framework ensures that access decisions align with roles, need-to-know, and least-privilege policies after identity has been established. Background checks or verification of a new employee’s history relate to screening before access decisions are made, not the ongoing authorization itself. Deactivation policies handle revoking access when someone leaves or a risk is detected, not the initial approval based on identity verification. So the guideline that governs approving access to resources based on identity verification is the access standards.

Access standards define the rules that turn a verified identity into concrete access rights. They specify who is allowed to reach which resources, under what conditions, and what authentication and authorization requirements apply. This framework ensures that access decisions align with roles, need-to-know, and least-privilege policies after identity has been established. Background checks or verification of a new employee’s history relate to screening before access decisions are made, not the ongoing authorization itself. Deactivation policies handle revoking access when someone leaves or a risk is detected, not the initial approval based on identity verification. So the guideline that governs approving access to resources based on identity verification is the access standards.