A hospital access-review KRI must show whether privileged AD groups…

Question

A hospital access-review KRI must show whether privileged AD groups still match approved membership. Where should those membership signals feed?

Accepted Answer

Into an IRM indicator that consumes identity-group membership data for the access-review measure — Who's in the privileged club is a signal — park it on an indicator that watches group membership. Annual paper charts, HR cases, or SAM licenses are the wrong mailboxes for that KRI.

Answer

Only into a printed org chart updated annually with no indicator record

Answer

Solely into CIS-HR case types as the authoritative access-review control

Answer

Into SAM license reconciliation as a substitute for access governance signals

A hospital access-review KRI must show whether privileged AD groups still match approved membership. Where should those membership signals feed?

Short Explanation

Full Explanation