Exam CISA topic 1 question 143 discussion

In a 24/7 processing environment, changing privileged application account passwords (such as by scheduling downtime) could disrupt critical operations. Introducing database access monitoring allows the organization to mitigate risks associated with these accounts while minimizing business disruption. Monitoring provides visibility into who or what is accessing the database and can identify suspicious activities, unauthorized access, or potential abuse of privileged accounts.

In a 24/7 processing environment, where continuous operation is critical for business operations, changing passwords that are set to "never expire" might lead to disruptions or downtime if not managed carefully. Modifying the access management policy to make allowances for application accounts can involve implementing compensating controls or alternative security measures to mitigate the risk associated with passwords that do not expire while ensuring continuous operation. Option B, introducing database access monitoring into the environment, is a valuable security measure, but it may not directly address the risk posed by privileged application accounts with passwords set to "never expire." Access monitoring can help detect and respond to unauthorized access attempts or suspicious activities, but it doesn't inherently address the issue of passwords not expiring.

Option C specifically targets the root cause of the risk by establishing guidelines or controls tailored to address the unique requirements of privileged application accounts. This approach allows organizations to enforce password management practices, such as periodic password changes or enhanced security measures, without disrupting business operations or requiring immediate downtime.

BEST Solution: This approach minimizes disruption and directly addresses the risk. Benefits: Applications no longer directly access the database. Privileged accounts can be managed separately, enforcing password policies. Improved security posture without impacting business continuity.

C - correct answer

B is answer

C. Modify the access management policy to make allowances for application accounts.