Which of the following questions is less likely to help in assessing identification and authentication controls?
A. Is a current list maintained and approved of authorized users and their access?
B. Are passwords changed at least every ninety days or earlier if needed?
C. Are inactive user identifications disabled after a specified period of time?
D. Is there a process for reporting incidents?
Which of the following questions is less likely to help in assessing identification and authentication controls?
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
Which of the following questions is less likely to help in assessing identification and authentication controls?
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!