Access management is closely related to which other process?

Question

Options

• ACapacity management only
• B3rd line support
• CInformation security management
• DChange management

• A
  2% (1)
• B
  2% (1)
• C
  91% (43)
• D
  4% (2)

Explanation

Access management is the operational implementation of Information Security Management (ISM) policies - ISM defines who should have access to what and under what conditions, while access management enforces those rules by granting, modifying, and revoking user access. They are inherently linked because every access decision flows from the security policies ISM establishes, making them two sides of the same coin in protecting confidentiality, integrity, and availability.

Why the distractors are wrong:

• A (Capacity management): Concerned with ensuring IT resources meet demand - it's about performance and throughput, not user rights or permissions.
• B (3rd line support): A support tier for resolving complex technical escalations; it has no direct governance relationship with access provisioning.
• D (Change management): Access requests may route through change management as a control mechanism, but change management governs all types of IT changes broadly - it is not the defining counterpart to access management.

Memory tip: Think of ISM as the security constitution and access management as the border control that enforces it. One writes the rules, the other applies them at the gate.

No community discussion yet for this question.