Which guideline most directly governs deprovisioning and identity lifecycle?

Which guideline most directly governs deprovisioning and identity lifecycle?

• A. Background Check
• B. Verification of a new employee's history
• C. Access Standards
• D. Deactivation Policies

Answer: (D)

Deactivation policies govern how identities are retired and access is removed as part of the lifecycle. They specify when an account should be disabled, when credentials are revoked, and the steps to revoke or restrict access when someone leaves, changes roles, or is terminated. This provides the explicit, repeatable process that ensures access is stopped promptly and consistently, reducing the risk of lingering or orphaned accounts and supporting compliance with regulatory and organizational requirements. Background checks and verification of a new employee's history are pre-employment activities that occur before someone joins the organization, not part of ongoing lifecycle management. Access standards describe who should have access and under what conditions, but they do not define the end-of-life steps for deprovisioning. So the guideline that most directly addresses deprovisioning and the identity lifecycle is the deactivation policy.

Deactivation policies govern how identities are retired and access is removed as part of the lifecycle. They specify when an account should be disabled, when credentials are revoked, and the steps to revoke or restrict access when someone leaves, changes roles, or is terminated. This provides the explicit, repeatable process that ensures access is stopped promptly and consistently, reducing the risk of lingering or orphaned accounts and supporting compliance with regulatory and organizational requirements.

Background checks and verification of a new employee's history are pre-employment activities that occur before someone joins the organization, not part of ongoing lifecycle management. Access standards describe who should have access and under what conditions, but they do not define the end-of-life steps for deprovisioning. So the guideline that most directly addresses deprovisioning and the identity lifecycle is the deactivation policy.