Which elements define secure identity provisioning and lifecycle management in large enterprises?

• A. Standardized provisioning workflows, automated deprovisioning, role mappings, periodic access review, and integration with HR systems.
• B. Manual provisioning by managers with no deprovisioning automation.
• C. Ad hoc role assignment without defined workflows.
• D. External contractor access via guest accounts with no lifecycle management.

Answer: (A)

Secure identity provisioning and lifecycle management in large enterprises hinges on standardized, automated processes that stay in sync with the organization’s HR data and governance practices. When onboarding someone, you want a repeatable, auditable workflow that assigns the right entitlements based on their role, not on informal requests. Automated deprovisioning is essential so that former employees, contractors, or those who change roles no longer retain access to systems they shouldn’t, reducing the risk of orphaned accounts and privilege creep. Clear role mappings help translate business roles into precise sets of permissions, supporting least-privilege access and ensuring that changes in a person’s position propagate consistently across all systems. Periodic access reviews provide ongoing oversight, catching over-privileged access and providing auditable evidence for compliance. Integrating with HR systems keeps identity data accurate and ensures events like hires, transfers, and terminations automatically drive provisioning and deprovisioning, minimizing manual workload and errors.

Manual provisioning without automation is slow and error-prone, lacks scalability, and often results in outdated access when people leave or move. Ad hoc role assignment without defined workflows leads to inconsistent access and opaque audit trails, increasing security risk. External contractors with guest accounts and no lifecycle management create unmanaged access that can persist longer than intended, violating policy and compliance requirements.