Question

Security personnel recently performed a security audit. They identified several employees who had permissions for previously held jobs within the Company. What should the organization implement to prevent this in the future?

Answer 1

To prevent employees from retaining unnecessary permissions after changing jobs, organizations should implement role-based access control (RBAC) by analyzing job roles and assigning specific permissions based on those roles.

Step-by-step explanation:

To prevent employees from retaining unnecessary permissions after changing jobs within an organization, the organization should implement a process called role-based access control (RBAC). RBAC is a method where employees are granted permissions based on their specific job roles and responsibilities.

First, the organization needs to analyze and identify the different job roles within the company. Each job role should have a defined set of permissions required to perform that role. Then, the organization should assign these permissions to employees based on their job roles.

For example, if an employee moves from an administrative role to a finance role, their permissions should be updated to only include the necessary access related to finance. By regularly reviewing and updating employee permissions based on their job roles, the organization can prevent employees from retaining unnecessary permissions.