What is Access provisioning and deprovisioning?
In short
Access provisioning grants system access based on an approved request that matches the person's job. Deprovisioning removes access promptly when someone leaves or changes roles.
Key takeaways
- Auditors test samples of new users for approvals and of leavers for timely removal.
- Linking access to the human resources system helps automate removal.
- Accounts left active after someone leaves are a common finding.
Where it's tested
ISC: Information Technology General Controls (ITGCs) — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A developer at a company has standing write access to the production database. Which ITGC category does this deficiency primarily relate to, and why does it matter?