During an audit, it was determined from a sample that four out of 20 former employees were still accessing their email accounts. An information security analyst is reviewing the access to determine…

Question

Options

• AExamining the termination notification process from human resources and employee account
• BChecking social media platforms for disclosure of company sensitive and proprietary information
• CSending a test email to the former employees to document an undeliverable email and review the
• DReviewing the email global account list and the collaboration platform for recent activity

• A
  88% (28)
• B
  3% (1)
• C
  6% (2)
• D
  3% (1)

Explanation

To validate the audit finding that former employees still have email access, the most authoritative approach is examining the HR termination notification process alongside employee account status records. This reveals whether IT was properly notified to disable accounts and whether those actions were completed, providing documented evidence to confirm the finding and identify the process failure. Answer B (social media checks) detects data disclosure but does not validate access rights or account status. Answer C (sending test emails) only determines deliverability, not whether the former employee can authenticate and read email. Answer D (reviewing the global account list) shows account existence but does not document the process failure or validate whether active access occurred.

No community discussion yet for this question.