Exam CISSP topic 1 question 19 discussion

Initiate not create / grant

Agreed

The Information Technology (IT) department is best positioned to handle provisioning and deprovisioning of user accounts because it has the technical expertise, tools, and responsibility for managing access to systems and data. IT ensures accounts are created, modified, or removed securely and efficiently. While HR may notify IT of employee changes, IT executes the technical aspects of account management.

While Human Resources (HR) plays a critical role in managing employee lifecycle information (such as hiring, role changes, and terminations), the Information Technology (IT) department is ultimately responsible for the technical execution of user account provisioning and deprovisioning in most organizations. This aligns with CISSP principles of managing access control and system security, which falls under IT’s domain. So, I think :) IT is the better choice from a CISSP perspective.

D. since when did HR create user accounts? yes the onboard but once they have been cleared by HR. Paperwork is sent to IT DEP to create a user account through IAM and can then be assigned access control or GPO, yay or nay?

If the criterion is HR is "initiating", would it not actually be the hiring manager of the department deciding to hire or fire the employee. Poor question.

In THORS questions it was similar question and the answer was IT Administrator. Reason that HR doesnt touch creaetion of IT accounts. Now it is HT as correct answer... How can I answer correctly???

It's C...a hard C

The business unit that is BEST positioned to initiate provisioning and deprovisioning of user accounts within a large organization is the Information Technology (IT) department (option D). Provisioning and deprovisioning of user accounts involve managing access to various systems, applications, and resources within an organization. This process typically involves creating user accounts, granting appropriate permissions, and ensuring access is provided based on business requirements and security policies. The IT department is responsible for managing the organization's technology infrastructure, including user accounts and access controls. while other business units may have a role in the overall user account lifecycle (e.g., the HR department may provide employee information to initiate account creation), the IT department is typically responsible for implementing and enforcing access controls, managing user accounts, and ensuring the proper provisioning and deprovisioning of user accounts based on organizational policies and procedures.

C is correct

First slight D, but it say initiate not perform change to C

C is correct answer. HR

Correct