Which term is the periodic evaluation of the IAM system's effectiveness?

Which term is the periodic evaluation of the IAM system's effectiveness?

• A. Audit Frequency
• B. Auditing
• C. Provisioning Process
• D. Access Approvals

Answer: (B)

Auditing is the periodic evaluation of the IAM system’s effectiveness. It involves reviewing controls, policies, access reviews, logs, and processes to determine if the IAM program operates as intended, remains compliant, and effectively mitigates risks. Through audits you verify that access is appropriate, governance steps are followed, and gaps or weaknesses are identified for remediation. The other terms describe related ideas but not the evaluation itself: audit frequency is simply how often audits occur; the provisioning process covers creating, updating, or removing identities and permissions; and access approvals are the authorization steps for granting access.

Auditing is the periodic evaluation of the IAM system’s effectiveness. It involves reviewing controls, policies, access reviews, logs, and processes to determine if the IAM program operates as intended, remains compliant, and effectively mitigates risks. Through audits you verify that access is appropriate, governance steps are followed, and gaps or weaknesses are identified for remediation.

The other terms describe related ideas but not the evaluation itself: audit frequency is simply how often audits occur; the provisioning process covers creating, updating, or removing identities and permissions; and access approvals are the authorization steps for granting access.