What are the required checks before access rights changes?

• A. Biometric Authentication
• B. Approval processes
• C. One-Time Password
• D. Compliance monitoring

Answer: (B)

Before access rights are changed, an approval process is required. This formal authorization step ensures that any modification to permissions is reviewed, justified, and approved by the appropriate stakeholders, creating an auditable record of who requested the change, who approved it, and when it was implemented. It enforces separation of duties and helps prevent privilege escalation, aligning with governance and compliance needs.

Biometric authentication and a one-time password are methods for verifying identity, not controls that govern whether a change to access rights should be allowed. Compliance monitoring focuses on detecting issues after controls are in place, rather than serving as the gatekeeper before a change is made.