An external consultant is granted standing domain admin 'for convenience' with no contract security clauses or time-bound access. What should the city require instead?
Select an answer to reveal the explanation.
Short Explanation
Standing domain admin 'because it's easier' is how contractors become permanent kings of the kingdom. Put the deal in writing, shrink the privilege to the job, and expire it. Convenience is not a control objective.
Full Explanation
Vendor, consultant, and contractor controls include contractual security requirements and access limited to what the engagement needs. Standing high privilege without agreements or review violates least privilege and third-party personnel security expectations. Time-bounded, monitored accounts with clear offboarding are the CISSP-aligned pattern.