nerdexam
Isaca

CISM · Question #200

Which of the following presents the GREATEST challenge to a large multinational organization using an automated identity and access management (IAM) system?

The correct answer is A. Inaccurate workforce data from human resources (HR). Automated IAM systems are only as accurate and effective as the data they are fed. In most organizations, IAM is driven by authoritative HR data - employee records, roles, departments, and employment status. If that source data is inaccurate, outdated, or incomplete, the IAM syst

Submitted by ngozi_ng· Apr 18, 2026Information Security Program Development and Management

Question

Which of the following presents the GREATEST challenge to a large multinational organization using an automated identity and access management (IAM) system?

Options

  • AInaccurate workforce data from human resources (HR)
  • BLarge number of applications in the organization
  • CFrequent changes to user roles during employment
  • DStaff turnover rates that significantly exceed industry averages

How the community answered

(35 responses)
  • A
    54% (19)
  • B
    29% (10)
  • C
    11% (4)
  • D
    6% (2)

Explanation

Automated IAM systems are only as accurate and effective as the data they are fed. In most organizations, IAM is driven by authoritative HR data - employee records, roles, departments, and employment status. If that source data is inaccurate, outdated, or incomplete, the IAM system will automatically provision incorrect access, fail to deprovision terminated users, or assign wrong entitlements across thousands of accounts at scale. This is especially dangerous in a large multinational because errors propagate quickly and broadly through automation. A large number of applications (B) is a complexity challenge but is a known and manageable design consideration. Frequent role changes (C) and high staff turnover (D) create IAM workload but are operational challenges that the system is designed to handle - IAM is built for change events. Bad source data, however, undermines the entire automated trust model.

Topics

#Identity and Access Management (IAM)#Automated Provisioning#HR Data Integration#Security Challenges

Community Discussion

No community discussion yet for this question.

Full CISM Practice