Which of the following security account management techniques should a security analyst implement to prevent staff, who has switched company roles, from exceeding privileges?

When a user changes roles, their old permissions are often not revoked, resulting in privilege creep - the accumulation of rights beyond what the current role requires. Internal account audits systematically review all user accounts and their assigned permissions against current job roles, allowing administrators to identify and remove excessive privileges. This is the most targeted technique to address the specific problem of users exceeding their intended access after a role change.

Account disablement removes all access entirely and would be used for terminated employees, not for employees who have changed roles and still need some access.

Time of day restrictions limit when users can log in but do not affect what resources or privileges they can access.

Password complexity policies govern password strength and have no effect on the scope or level of privileges assigned to an account.