Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. Formal approval of the account by the user's manager. The best evidence that a user account has been properly authorized is "B. Formal approval of the account by the user's manager." User account authorization should involve an appropriate level of managerial approval to ensure that the creation or modification of the account aligns with the organization's security and access policies. The manager's approval signifies that the account is needed and authorized for the user. While the other options (notification from human resources, user privileges matching the request form, an email from the user accepting the account) can provide supporting information, formal approval by the user's manager is the most direct and authoritative evidence of proper authorization, as it ensures that the request has been reviewed and approved by an appropriate individual with the necessary authority.
Agree it is B. Manager approval is properly authorized.
Managers authorize