In a quarterly system access review, an active privileged account was discovered that did not
exist in the prior review on the production system. The account was created one hour after
the previous access review. Which of the following is the BEST option to reduce overall risk
in addition to quarterly access reviews? (Answer with explanation)
A. Increase logging levels.
B. Implement bi-annual reviews.
C. Create policies for system access.
D. Implement and review risk-based alerts.