Which policy defines how user identities are changed and who is notified?

Which policy defines how user identities are changed and who is notified?

• A. Communication policy
• B. Data management governance
• C. Data classification policy
• D. Emerging security solutions

Answer: (A)

The main idea here is who is informed when user identity details change and how that information is communicated. A communication policy sets the rules for notifying the right people about identity-related events—what changes trigger notifications, who should receive them (for example, the user, their manager, HR, IT security), and through which channels or formats (email, tickets, secure messages). This ensures changes are communicated promptly, responsibilities are clear, and there’s a traceable record for audits and security. Data management governance deals with data ownership, stewardship, and lifecycle, not the notification workflow around identity updates. Data classification policy focuses on labeling data by sensitivity and handling rules, not who gets notified about identity changes. Emerging security solutions is not a policy and doesn’t define notification processes.

The main idea here is who is informed when user identity details change and how that information is communicated. A communication policy sets the rules for notifying the right people about identity-related events—what changes trigger notifications, who should receive them (for example, the user, their manager, HR, IT security), and through which channels or formats (email, tickets, secure messages). This ensures changes are communicated promptly, responsibilities are clear, and there’s a traceable record for audits and security.

Data management governance deals with data ownership, stewardship, and lifecycle, not the notification workflow around identity updates. Data classification policy focuses on labeling data by sensitivity and handling rules, not who gets notified about identity changes. Emerging security solutions is not a policy and doesn’t define notification processes.