During an audit, an information security analyst discovers accounts that are still assigned to employees who no longer work for the company and new accounts that need to be verified against a list…

Information classification is the process of categorizing data by sensitivity level and has no direct relationship to managing user account lifecycles.

Continuous monitoring is an ongoing security oversight discipline, not a specific procedure tied to employee status changes.

Employment and termination procedures govern the full lifecycle of user accounts, from provisioning at hire to deprovisioning at separation. Discovering accounts still assigned to former employees signals a breakdown in the termination workflow, while unverified new accounts indicate gaps in the onboarding and authorization process. Auditing these conditions provides the evidence needed to develop and strengthen those procedures.

Least privilege is a design principle that restricts access rights to the minimum necessary, but it does not define the provisioning and deprovisioning workflow being audited here.