Exam CRISC topic 1 question 592 discussion

C. Entitlement reviews. The best evidence of the effectiveness of an organization's account provisioning process is "C. Entitlement reviews." Entitlement reviews involve regularly reviewing and validating the permissions and access rights assigned to users. This process ensures that users have only the necessary access privileges and that unauthorized or excessive access is promptly identified and addressed. Effective entitlement reviews demonstrate that the account provisioning process is functioning correctly and that access rights are being appropriately managed. While the other options (user provisioning, security log monitoring, role-based access controls) are also important components of access management and security, entitlement reviews directly assess the accuracy and appropriateness of user access, making them a strong indicator of the effectiveness of the account provisioning process.

Agree with C.

User provisioning is an identity management process that ensures user accounts are created, given proper permissions, changed, disabled, and deleted. Role-based access controls (RBAC) is only one part of user provisioning. An Entitlement reviews is a review of user access permissions and other rights and is the best evidence of the effectiveness of the process.

I think it should b C, entitlement reviews. This would show a strong process is in place for managing the lifecycle of account provisioning.

I will go with D

not D?