Certified Information Systems Security Professional (CISSP) — Question 5

A large organization's human resources and security teams are planning on implementing technology to eliminate manual user access reviews and improve compliance. Which of the following options is MOST likely to resolve the issues associated with user access?

Answer options

• A. Implement a Privileged Access Management (PAM) system.
• B. Implement a role-based access control (RBAC) system.
• C. Implement identity and access management (IAM) platform.
• D. Implement a single sign-on (SSO) platform.

Correct answer: C

Explanation

The correct answer is C because an identity and access management (IAM) platform provides a comprehensive solution for managing user identities and access rights, facilitating automated reviews and compliance reporting. Options A and B focus on specific aspects of access control but do not cover the broader needs for automating compliance. Option D, while useful for user convenience, does not address the comprehensive management of user access rights.