Exam CISSP topic 1 question 193 discussion

C. Implement identity and access management (IAM) platform. An identity and access management (IAM) platform is designed to centralize and automate the management of user access to systems and resources. This can help eliminate manual user access reviews and improve compliance by automating the process of granting, modifying, and revoking user access based on defined policies and rules. It can also provide visibility into user access and activity, making it easier to identify and address any potential compliance issues.

Implement a role-based access control (RBAC) system should be the answer

C. Implement identity and access management (IAM) platform.

An IAM platform provides a comprehensive solution for the lifecycle of identities within an organization, ranging from account creation to deletion while ensuring compliance with organizational policies and industry regulations such as HIPAA or GDPR. The IAM platform also streamlines User Access Reviews by automating them which reduces human errors in performing manual reviews thus enhancing security and compliance posture of organizations.

This article will explain what user access reviews are, why they are important for the cybersecurity and compliance of your company and how the right IAM solution can help you automate the access review process. https://www.tenfold-security.com/en/user-access-review/

While IAM identifies each user and allows them access to an array of applications and services, PAM manages access and user’s actions on highly sensitive systems that are often limited to those with administrative privileges. https://www.citrix.com/blogs/2022/01/10/iam-vs-pam-how-are-they-different/