Which term describes the process of verifying that user accounts and access rights are accurate and up-to-date?

• A. Account Reconciliation
• B. Access Review and Certification
• C. Auditing and Reporting
• D. Digital Identity

Answer: (B)

Access Review and Certification is the formal process of validating that each user’s accounts and entitlements are appropriate and current. In practice, owners or managers periodically review who has access to systems and data, and they attest that those permissions are still needed. If an entitlement isn’t justified or a user no longer needs access, it’s revoked or adjusted. Regular certification campaigns help enforce least privilege and support compliance with policies and regulations. This differs from account reconciliation, which is about ensuring accounts exist and match authoritative sources, rather than continually verifying that every access right remains appropriate. Auditing and reporting focus on documenting and presenting access events rather than the ongoing accuracy of permissions. Digital identity covers the broader concept of managing identities, not the ongoing verification of entitlements.