A recent audit has revealed that several users have retained permissions to systems they should
no longer have rights to after being promoted or changed job positions. Which of the following
controls would BEST mitigate this issue?
A.
Separation of duties
B.
User account reviews
C.
Group based privileges
D.
Acceptable use policies
Explanation:
B.
Definitely B.
Separation of duties policies are designed to reduce the risk of fraud and to prevent other losses in an organization by requiring more than one person to accomplish key processes.
I don’t see why the answer is A. It is definitely B.