Certified in Risk and Information Systems Control (CRISC) — Question 148
Which of the following provides the BEST evidence of the effectiveness of an organization's account provisioning process?
Answer options
- A. User provisioning
- B. Security log monitoring
- C. Entitlement reviews
- D. Role-based access controls
Correct answer: C
Explanation
Entitlement reviews are essential for assessing whether users have the appropriate access rights and whether the provisioning process is functioning effectively. While user provisioning and role-based access controls are important components of access management, they do not directly measure the effectiveness of the provisioning process. Security log monitoring is useful for detecting anomalies but does not specifically evaluate the provisioning process itself.