Acess Management: Process Management
About the Lecture
The lecture Acess Management: Process Management by IT Training Zone is from the course ITIL® OSA - Operational Support and Analysis . It contains the following chapters:
- Lesson Contents
- Outputs, Interfaces
- Information Management
- CSFs and KPIs
- Challenges, Risks
Included Quiz Questions
Which of the following is NOT a valid trigger for the Access Management process?
- A request by a member of a technical support team member to increase a user’s access to prevent the user getting an error message
- An RFC
- A Service Request
- A request via Human Resources or a business manager
Which of the following statements is NOT an input into the Access Management process?
- Service Acceptance Criteria
- Information security policies
- SLA target times for responding to access requests
- Authorised requests to grant or terminate access rights
Which of the following statements is NOT an output from the Access Management process?
- Security Policies
- Provision of access to IT services in line with information security policies
- Access Management records
- History of access denied and the reasons
Which of the following statements about Access Management’s interface with Service Strategy is TRUE?
- Strategy Management will decide whether some Access Management should be centralised or devolved
- Demand Management limits the volume of requests for access to a level that can be handled by the resources provided within the SLA target
- Neither
Which of the following statements about Access Management’s interface with Service Design is/are TRUE?
- Service Level Management: This process maintains the agreements for access to each service, the criteria, the cost, if appropriate and access levels for different types of user
- Access Management must be included in the IT Service Continuity Management plan so that the process can operate in the event of a major business disruption
- Information Security Management lays down the policies which Access Management follows
- Access Management works with Supplier Management to ensure that 3rd party supplier’s access rights to data are controlled
- Access Management works with Capacity Management to ensure this warranty aspect is delivered
Which of the following statements about Access Management’s interface with other service lifecycle phases is/are TRUE?
- Access Management receives access requests through the Service Operation process of Request Fulfilment
- Access Management will log occurrences of abuse of access rights through the Service Operation process of Incident Management
- Access Management may receive access requests through the Service Transition process of Change Management
- Access Management will highlight issues to Continual Service Improvement
- Access Management will validate test plans as part of Service Transition to ensure they test adherence to data access policies
Which of the following statements about roles is TRUE?
- Two or more users may share the same common piece of information used to verify identity
- Two or more users may have the same rights to data, and may therefore share a common identity on the system
- Neither
A typical CSF for Access Management is ensuring that the confidentiality, integrity and availability of services are protected in accordance with the information security policy. Which of the following is NOT a KPI which could measure whether this CSF was being achieved?
- % of requests which are for an increase in access rights
- % of incidents involving actual or attempted inappropriate access to services
- Number of errors found in audits involving out of date access settings for users
- Number of incidents caused by incorrect access settings or where access rights needed to be reset
Which of the following statements about roles is TRUE?
- Access Management may maintain a catalogue of standard roles and the access required for each
- Users may be added to a service group and will therefore be granted all the access rights for that group
- Neither
Which of the following are potential risks for Access Management?
- Controlling access from ‘back door’ sources such as application interfaces and changes to firewall rules for special needs
- Security policies become bureaucratic and/or excessively difficult to follow, discouraging compliance
- Neither
Author of lecture Acess Management: Process Management
IT Training Zone
Customer reviews
5,0 of 5 stars
| 5 Stars |
|
5 |
| 4 Stars |
|
0 |
| 3 Stars |
|
0 |
| 2 Stars |
|
0 |
| 1 Star |
|
0 |
