A recent audit of a company’s identity management system shows that 30% of active accounts belong to
people no longer with the firm. Which of the following should be performed to help avoid this scenario? (Choose
Automatically disable accounts that have not been utilized for at least 10 days.
Utilize automated provisioning and de-provisioning processes where possible.
Request that employees provide a list of systems that they have access to prior to leaving the firm.
Perform regular user account review / revalidation process.
Implement a process where new account creations require management approval.
Provisioning and de-provisioning processes can occur manually or automatically. Since the manual processes
are so time consuming, the automated option should be used as it is more efficient. Revalidating user accounts
would determine which users are no longer active.