Which term describes centralized auditing of access permissions across a firm?

• A. Centralized auditing of all employees' access permissions across the firm
• B. Fragmented auditing
• C. Independent auditing
• D. Lack of auditing

Answer: (A)

Centralized auditing of access permissions across an organization creates a single, authoritative view of who can access what across all systems. This unified approach makes governance stronger by enabling consistent policy enforcement, easier access reviews, and faster identification of risky situations like privilege creep or conflicting duties. By pulling permission data from directories, databases, applications, and cloud services into one place, you can continuously verify that each employee’s access matches their role and current responsibilities.

If auditing were fragmented, it would exist in separate silos, making it hard to see the full risk picture and leading to gaps. Independent auditing refers to external or separate assessments rather than a unified internal process, and lack of auditing means there is no review at all.