Certified Information Systems Security Professional (CISSP) — Question 410

Within a large organization, what business unit is BEST positioned to initiate provisioning and deprovisioning of user accounts?

Answer options

• A. Training department
• B. Internal audit
• C. Human resources
• D. Information technology (IT)

Correct answer: C

Explanation

The Human Resources department is responsible for managing employee records and onboarding processes, making it the best unit to handle user account provisioning and deprovisioning. While IT can support these actions, they rely on HR's input regarding personnel changes. The Training department and Internal audit do not have the necessary functions related to user account management.