When should access to a customer database be revoked for a transitioned employee?

When should access to a customer database be revoked for a transitioned employee?

• A. At the end of the fiscal year
• B. Immediately upon role change
• C. After a probation period
• D. Only when requested by the employee

Answer: (B)

Access to a customer database should be revoked immediately upon a role change because it is crucial to maintain data security and integrity. When an employee transitions to a different role, particularly if the new position does not require access to the customer database, continuing that access increases the risk of unauthorized data exposure or misuse. Immediate revocation of access ensures that only those who need it for their current responsibilities can access sensitive information.

In a professional environment, best practices in data security advocate for timely responses to changes in employment status, particularly concerning access privileges. This approach helps organizations comply with data protection regulations and safeguard customer information. Other choices suggest delaying access revocation, which can potentially lead to security vulnerabilities.