Which access control method allows employees to access the necessary assets when transferring departments?

Boost your ISC² exam readiness. Answer questions with detailed explanations. Gear up for certification success!

Role-based access controls (RBAC) is the correct choice because this method is designed to assign access rights based on the roles of users within an organization. When employees transfer departments, their access permissions can be updated to reflect their new role, ensuring they have access to the necessary assets needed for their new responsibilities while still maintaining security measures.

This approach enhances efficiency, as it simplifies the management of user permissions by linking access rights to job functions rather than on a user-by-user basis. When an employee moves to another department, their role can be adjusted in the access control system, allowing for seamless transition and minimal disruption to operations.

In contrast, mandatory access controls (MAC) enforce strict policies that typically do not change even when users change roles, which can make transitioning more complex. Discretionary access controls (DAC) allow users to control access to their own resources, which may lead to inconsistent permission levels when employees transfer between departments. Barbed wire, while a form of physical security, does not relate at all to the management of electronic access to assets. The focus on role-based access explicitly ties to organizational structure and personnel changes, making it the most appropriate method in this context.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy