Page 1274 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 1274
access review audit ensures that object access and account
management practices support the security policy. User entitlement
audits ensure that the principle of least privilege is followed and often
focus on privileged accounts.
Audit access controls. Regular reviews and audits of access control
processes help assess the effectiveness of access controls. For example,
auditing can track logon success and failure of any account. An
intrusion detection system can monitor these logs and easily identify
attacks and notify administrators.
