ISC2 CISSP Practice Question

Role-based access control with automated workflows for role transitions directly addresses the problem of privilege accumulation (or "permission creep") that occurs during department transfers. This solution ensures that when employees move to new roles, the system automatically revokes their previous access rights and grants only those required for their new position, maintaining the principle of least privilege. Quarterly access reviews would eventually catch these issues but don't prevent them proactively. Just-in-time access provisioning focuses on temporary access rather than role transitions. Separation of duties between teams doesn't directly solve the problem of employees retaining old privileges during transfers.