A department head at a university resigned on the first day of spring semester. It was subsequently determined that the department head deleted numerous files and directories from the server-based…

Time-of-day restrictions limit when a user can access resources but would not prevent a former employee with active credentials from performing unauthorized actions if their account was still enabled during allowed access hours.

Permissions auditing and review is a reactive or proactive measure for examining and adjusting access rights, but it would not prevent the initial unauthorized deletion by an employee who still had active access post-resignation.

Offboarding is the systematic process of revoking an employee's access to organizational resources, disabling their accounts, and recovering assets upon their departure. Implementing immediate offboarding procedures upon resignation would have ensured that the department head's access to the server home directory was terminated before they could delete files, thereby preventing the incident.

Account expiration involves setting a future date for an account to become inactive, which is generally not an immediate response to an unexpected resignation and would not prevent actions taken before that date.