Managers must periodically confirm that their staff still need access to finance systems after role changes. What IAM process is this?
Select an answer to reveal the explanation.
Short Explanation
Attestation is the quarterly 'does this person still need the finance keys?' check from the manager who knows the job—not a forever freeze or a silent entitlement pile-on.
Full Explanation
Access attestation is the periodic manager confirmation that staff still need entitlements—here, finance-system access—after role changes, transfers, or time passage. Managers who understand current job duties certify continued need or request removal, which catches entitlement creep that joiner workflows alone miss. For municipal finance applications touching budgets, payments, or tax-related data, recurring attestation is a core IAM governance control under access reviews.
An emergency change freeze that blocks all access reviews for a year stops the very process that removes excess rights and increases risk over time. Automatic permanent entitlement growth whenever any ticket is opened encodes privilege creep into the service desk. Deleting the finance application instead of reviewing who can use it abandons the business system rather than governing access.
Exam caveat: attestation quality depends on meaningful manager decisions—rubber-stamping every review fails the control. Combine attestation with automated joiner/mover/leaver feeds so reviews are not the only removal path.
Operational check: schedule recurring finance-access attestation campaigns, measure completion and revocation rates, sample certified users against current HR job roles, and escalate overdue reviews for accounts with high-risk finance entitlements.