When do units with COMTAC accounts get inspected?

When do units with COMTAC accounts get inspected?

• A. Within 6 months of commissioning the account and 6 months before decommissioning
• B. Within 12 months of commissioning
• C. Annually
• D. Every 2 years

Answer: (A)

Access control tied to lifecycle phases is the idea here. COMTAC accounts should be inspected at two key points: shortly after the account is created and before it is removed. Doing the review within six months of commissioning ensures the setup, roles, and permissions are correct early on, catching any misconfigurations while the account is still fresh. Inspecting within six months before decommissioning ensures that any remaining access is properly revoked, privileges updated, and records archived before the account is no longer in use. Choosing longer intervals, like within a year of commissioning, annually, or every two years, allows misconfigurations or orphaned access to linger for extended periods, increasing security risk and neglecting lifecycle governance.

Access control tied to lifecycle phases is the idea here. COMTAC accounts should be inspected at two key points: shortly after the account is created and before it is removed. Doing the review within six months of commissioning ensures the setup, roles, and permissions are correct early on, catching any misconfigurations while the account is still fresh. Inspecting within six months before decommissioning ensures that any remaining access is properly revoked, privileges updated, and records archived before the account is no longer in use.

Choosing longer intervals, like within a year of commissioning, annually, or every two years, allows misconfigurations or orphaned access to linger for extended periods, increasing security risk and neglecting lifecycle governance.