What is the purpose of the General Policy regarding HR data?

• A. All identities can bypass manager approval
• B. All identities must have managers unless they are C-Level executives
• C. Managers are optional for HR data
• D. Only C-Level executives require managers

Answer: (B)

The choice indicating that all identities must have managers unless they are C-Level executives aligns with the governance and control standards in identity management. This policy typically aims to ensure accountability and oversight within the organizational structure. By requiring that every identity is tied to a manager, except for those in the highest leadership roles, it promotes a system of checks and balances.

C-Level executives, being the highest-ranking employees, often operate with greater autonomy due to their leadership responsibilities and the strategic nature of their roles. Thus, the policy acknowledges that while manager oversight is critical for most employees, the roles of top executives warrant a different structure of review and control. This balance is essential for maintaining effective management without stifling the decision-making agility that C-Level positions require.

This approach ultimately supports a robust identity governance framework that facilitates security, compliance, and proper data management practices within organizations.