What is typically involved in the deprovisioning process?

• A. Only access removal is performed
• B. Access revocation, account deletion, and data archiving may be involved
• C. Just a notification is sent to the manager
• D. No actions are taken until the next audit

Answer: (B)

The deprovisioning process is a critical part of identity management, particularly in ensuring that access to systems and data is appropriately revoked when an individual's role changes or they leave an organization. This process is comprehensive and includes several key actions aimed at safeguarding the organization's assets.

In this context, access revocation is essential as it ensures that the individual no longer has the ability to access sensitive resources. Account deletion may be necessary to eliminate the user account from the system entirely, thereby preventing any unauthorized logins in the future. Data archiving is often involved as well, which ensures that any relevant data associated with the user is preserved for compliance or future reference, especially if the user’s data needs to be retained for legal or regulatory reasons.

The other options are limited in scope and do not adequately address the comprehensive nature of the deprovisioning process. Simply performing access removal overlooks the importance of data management and compliance. Sending just a notification to a manager lacks the necessary action involved in effectively deprovisioning a user and could lead to security vulnerabilities. Waiting until the next audit to take action would create significant risks by leaving access intact longer than necessary, which is contrary to best practices in identity management.