CRISC Certified in Risk and Information Systems Control – Question559

Which of the following is the BEST method to ensure a terminated employee’s access to IT systems is revoked upon departure from the organization?

A.
Login attempts are reconciled to a list of terminated employees
B. A process to remove employee access during the exit interview is implemented
C. The human resources (HR) system automatically revokes system access
D. A list of terminated employees is generated for reconciliation against current IT access

Correct Answer: D