Which issue describes variability in access procedures across units?

• A. Reporting and Auditing
• B. Access Review
• C. Segregation of Duties
• D. Inconsistent Processes

Answer: (D)

Variability in access procedures across units points to inconsistent processes in how access is granted, reviewed, and removed. When each unit uses its own methods, approvals, timelines, and validation steps, there’s no uniform control baseline. This can lead to over-privilege, delayed revocations, and gaps that are hard to audit or enforce. Achieving consistency—through centralized policies, standardized workflows, and automated provisioning—ensures that every unit follows the same steps, making access governance predictable and auditable.

The other concepts address different aspects: reporting and auditing focuses on visibility and traceability of access actions, access reviews examine periodic checks of who has what access, and segregation of duties ensures that conflicting responsibilities aren’t combined in a single role. None of those directly describes variability in how access procedures are implemented across units.