Exam CISSP topic 1 question 189 discussion

D. Clear provisioning policies

Clear provisioning policies would ensure that user access is accurately defined and documented, making it easier for the security team to regularly review employee user access and spot any discrepancies or unauthorized access. Segregation of duties and frequent audits are also important, but they are not as directly related to the effectiveness of automated account reconciliation. Removing service accounts from review may actually increase the risk of errors or unauthorized access.

The security team's plan to use automated account reconciliation in the corporate user access review process is likely to be most effective and have the fewest errors if they implement clear provisioning policies. This is because clear provisioning policies outline the specific roles, responsibilities, and procedures for granting, modifying, and revoking user access to systems and resources. By clearly defining these policies, the security team can ensure that the automated account reconciliation process is accurately and consistently applied to all user accounts. This will help to reduce the risk of errors and ensure that the audit process is thorough and effective.

Agree, clear provisioning processes guarantees or at least increases chances for an automatic reconciliation to work as expected.