CIMP Identity Governance & Administration Flashcards

Which US federal regulation most directly drives the need for access certifications and SoD controls in publicly traded companies?

Answer: SOX (Sarbanes-Oxley Act)

SOX Section 404 requires management to assess internal controls over financial reporting, making IGA and SoD controls essential for compliance.

What is an 'orphan account' in the context of identity governance?

Answer: An account that no longer has an associated active user

Orphan accounts are credentials that remain active after the associated user has left or changed roles, posing a significant security risk.

In IGA, what is 'birthright access'?

Answer: The standard set of access rights automatically provisioned to all users in a given role upon hire

Birthright access defines the baseline entitlements every user in a particular role receives automatically as part of the standard onboarding process.

What distinguishes a Role-Based Access Control (RBAC) model from an Attribute-Based Access Control (ABAC) model?

Answer: RBAC grants access based on job roles, while ABAC uses dynamic attributes like location, time, or device

RBAC assigns permissions to predefined roles, whereas ABAC makes dynamic access decisions based on multiple user, resource, and environmental attributes.

Why is automated provisioning preferred over manual provisioning in large enterprises?

Answer: It reduces errors, speeds up access delivery, and ensures consistent policy enforcement

Automated provisioning enforces consistent policies, reduces human error, and dramatically shortens the time required to grant or revoke access at scale.

What is 'entitlement creep' (also called privilege creep) in IGA?

Answer: The gradual accumulation of access rights beyond what a user currently needs

Entitlement creep occurs when users accumulate permissions over time through role changes without having old access removed, violating the least privilege principle.