After an audit, it was discovered that the security group memberships were not properly adjusted
for employees’ accounts when they moved from one role to another. Which of the following has
the organization failed to properly implement? (Select TWO).

A.
Mandatory access control enforcement.

B.
User rights and permission reviews.

C.
Technical controls over account management.

D.
Account termination procedures.

E.
Management controls over account management.

F.
Incident management and response plan.

Explanation: