Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Enterprise Resource Management

A company's ERP administrator discovers that a departed employee's user ID is still active and was used to view payroll data last week. Which control failure is the most direct cause?

The most direct cause is weak user access lifecycle management: the leaver's account was not deprovisioned on exit. Timely revocation of access when employment ends is a core ERP control. Backup encryption, server capacity or the hosting model would not explain a dormant account remaining usable.

  1. AWeak user access lifecycle management, with no timely deprovisioningCorrect
  2. BAbsence of data encryption in backups
  3. CInsufficient server processing capacity
  4. DUse of a cloud-hosted ERP instead of on-premise

Explanation

The problem is that access was not revoked when employment ended, which is a failure of joiner-mover-leaver (access lifecycle) management. Encryption of backups or capacity would not stop a live dormant account being used, and hosting model is irrelevant to the lapse.

Did you get it right without looking?

One question tells you little. A timed set on Enterprise Resource Management shows your real accuracy, how long you take and where you lose marks.

Practise Enterprise Resource ManagementFree diagnostic mock

More Enterprise Resource Management questions