Which guideline should be consulted to verify an individual's qualifications before accessing secure resources?

Which guideline should be consulted to verify an individual's qualifications before accessing secure resources?

• A. Background Check
• B. Verification of a new employee's history
• C. Access Standards
• D. Deactivation Policies

Answer: (C)

Access decisions for secure resources should be guided by defined Access Standards. These standards spell out the qualifications, credentials, roles, or attributes required to gain access, providing the criteria used to determine eligibility and ensuring consistent, auditable control. Background checks or verifying a candidate’s history are important onboarding checks used to assess risk, but they’re actions within the process rather than the policy that defines what qualifies someone to access resources. Deactivation policies govern revocation of access after someone leaves or changes roles, not the pre-access verification criteria.

Access decisions for secure resources should be guided by defined Access Standards. These standards spell out the qualifications, credentials, roles, or attributes required to gain access, providing the criteria used to determine eligibility and ensuring consistent, auditable control. Background checks or verifying a candidate’s history are important onboarding checks used to assess risk, but they’re actions within the process rather than the policy that defines what qualifies someone to access resources. Deactivation policies govern revocation of access after someone leaves or changes roles, not the pre-access verification criteria.