What happens if reviewers do not complete their reviews within the specified time frame?

• A. Reviews expire automatically
• B. The request is declined
• C. It is escalated to a new reviewer up to three times
• D. The reviewer is automatically notified

Answer: (C)

When reviewers do not complete their reviews within the specified time frame, the established protocol within identity governance processes often includes a mechanism for escalation. Escalation to a new reviewer is designed to ensure that the review process does not come to a standstill and that the necessary approvals or evaluations can still take place in a timely manner. By allowing a new reviewer to step in, the organization maintains compliance and governance over identity-related decisions, reduces risks associated with delayed reviews, and keeps the workflow moving forward.

This process typically may allow for multiple escalations (often up to three, as suggested) to ensure that at least one responsible individual is engaged in completing the task, which ultimately helps in meeting compliance and security objectives without unnecessary delays.

Other possible consequences, like automatic expiration of reviews, while they may occur in some systems, do not actively promote resolution of pending reviews and could lead to further lapses in workflow. Thus, the focus tends to be on keeping the process active and functional through additional reviews rather than letting them simply expire or decline automatically.