Which term covers the procedures governing user access to resources?

Which term covers the procedures governing user access to resources?

• A. Access Control Processes
• B. Access Rights
• C. Awareness Campaigns
• D. Lifecycle Transformation

Answer: (A)

Access control processes encompass the procedures that manage how users are granted, enforced, reviewed, and revoked for access to resources. This includes defining who has which permissions through policies and roles, authenticating users, authorizing access requests, provisioning and de-provisioning accounts, enforcing the principle of least privilege, conducting regular access reviews, and auditing access events. These procedures ensure access is controlled consistently and securely across systems, rather than relying on ad hoc decisions. Access rights, by contrast, refer to the actual permissions granted to an identity, not the steps and controls used to grant, enforce, or revoke them. Awareness campaigns focus on training users about security, not on controlling resource access. Lifecycle transformation isn’t the standard term for access governance procedures and doesn’t describe the governing processes for resource access.

Access control processes encompass the procedures that manage how users are granted, enforced, reviewed, and revoked for access to resources. This includes defining who has which permissions through policies and roles, authenticating users, authorizing access requests, provisioning and de-provisioning accounts, enforcing the principle of least privilege, conducting regular access reviews, and auditing access events. These procedures ensure access is controlled consistently and securely across systems, rather than relying on ad hoc decisions.

Access rights, by contrast, refer to the actual permissions granted to an identity, not the steps and controls used to grant, enforce, or revoke them. Awareness campaigns focus on training users about security, not on controlling resource access. Lifecycle transformation isn’t the standard term for access governance procedures and doesn’t describe the governing processes for resource access.