CompTIA CASP+ Practice Test

What should a company do to comply with security standards after an audit reveals inadequate user account management?

1. Update security training programs

2. Automate account management processes

3. Draft new user access policies

4. Enhance monitoring of network activities

The correct answer is: Draft new user access policies

To comply with security standards after an audit reveals inadequate user account management, drafting new user access policies is essential. Establishing clear and effective user access policies ensures that there are defined procedures for creating, modifying, and deleting user accounts, as well as guidelines for granting and revoking access rights based on roles and responsibilities. This not only helps in addressing the specific issues identified in the audit but also promotes ongoing compliance with security standards by providing a framework for accountability and regular reviews of user access. Revising these policies can facilitate more controlled access to sensitive resources, reduce the risk of unauthorized access, and ensure that the organization aligns itself with best practices and regulatory requirements. Furthermore, strong user access policies contribute to the overall security posture of the organization, minimizing potential vulnerabilities associated with user accounts. While updating security training programs, automating account management processes, and enhancing monitoring of network activities are certainly valuable initiatives, they may not directly address the core issue of inadequate user account management as effectively as implementing clear and comprehensive user access policies.