The compliance team requires an annual recertification of privileged and non-privileged user access. However,
multiple users who left the company six months ago still have access. Which of the following would have
prevented this compliance violation?


A. Account audits
B. AUP
C. Password reuse
D. SSO