A supervisor in your organization was demoted on Friday afternoon. The supervisor had the ability to modify the contents of a confidential database, as well as other managerial permissions. On Monday morning, the database administrator reported that log files indicated that several records were missing from the database. Which of the following risk mitigation strategies should have been implemented when the supervisor was demoted?

Question

Quizplus · Accepted Answer

When the supervisor was demoted, their access rights should have been reviewed and adjusted immediately to prevent unauthorized access. Monthly user rights reviews would help ensure that permissions are updated in a timely manner following changes in roles or responsibilities.

A Supervisor in Your Organization Was Demoted on Friday Afternoon