After an audit, it was discovered that the security group memberships were not properly adjusted for
employees’ accounts when they moved from one role to another. Which of the following has the organization
failed to properly implement? (Choose two.)

A.
Mandatory access control enforcement.

B.
User rights and permission reviews.

C.
Technical controls over account management.

D.
Account termination procedures.

E.
Management controls over account management.

F.
Incident management and response plan.

Explanation:
Reviewing user rights and permissions can be used to determine that all groups, users, and other accounts
have the appropriate privileges assigned according to the policies of the corporation and their job descriptions
since they were all moved to different roles.
Control over account management would have taken into account the different roles that employees have and
adjusted the rights and permissions of these roles accordingly.