A quarterly IAM review for a city internship program finds dozens of dormant accounts that still have portal access months after interns left. What control practice does this finding primarily reinforce?
Select an answer to reveal the explanation.
Short Explanation
Interns leave; their logins sometimes do not. A quarterly who-still-has-keys walkthrough is an access review—catch dormant accounts before they become free souvenirs for attackers.
Full Explanation
Account access reviews (recertification) periodically verify that user, system, and service entitlements remain appropriate. Finding dormant intern accounts demonstrates why reviews must include joiners, movers, and leavers outcomes and unused access, not only password policy or MFA hardware changes. Disabling logging would hide the problem rather than remediate orphaned access.