nerdexam
Isaca

CISM · Question #336

An access rights review revealed that some former employees' access is still active. Once the access is revoked, which of the following is the BEST course of action to help prevent recurrence?

The correct answer is C. Validate HR offboarding processes.. The best course of action to prevent the recurrence of former employees retaining access is to validate and improve the HR offboarding processes. Ensuring that these processes are comprehensive and consistently followed helps ensure that access rights are revoked in a timely mann

Submitted by krish.m· Apr 18, 2026Information Security Program Development and Management

Question

An access rights review revealed that some former employees’ access is still active. Once the access is revoked, which of the following is the BEST course of action to help prevent recurrence?

Options

  • AInitiate an access control policy review.
  • BImplement a data loss prevention (DLP) system.
  • CValidate HR offboarding processes.
  • DConduct a root cause analysis.

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    17% (4)
  • C
    71% (17)
  • D
    8% (2)

Explanation

The best course of action to prevent the recurrence of former employees retaining access is to validate and improve the HR offboarding processes. Ensuring that these processes are comprehensive and consistently followed helps ensure that access rights are revoked in a timely manner when employees leave the organization, reducing the risk of unauthorized access.

Topics

#Access Management#Offboarding#Preventive Controls#HR Security

Community Discussion

No community discussion yet for this question.

Full CISM Practice