Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 123

An employee was promoted within the organization and relocated to a new office in a different building. A few months later, security personnel discovered that the employee's smart card was being used to access the building where she previously worked. Which of the following security controls could prevent such an incident from occurring?

Answer options

• A. Regular review of logs.
• B. Two-level authentication.
• C. Photos on smart cards.
• D. Restriction of access hours.

Correct answer: B

Explanation

The correct answer is B, as two-level authentication adds an extra layer of security, making it harder for unauthorized access using old credentials. The other options, while beneficial, do not specifically address the issue of unauthorized access using an outdated smart card.