Which guideline is primarily about evaluating and confirming a candidate's identity and suitability before provisioning access?

Which guideline is primarily about evaluating and confirming a candidate's identity and suitability before provisioning access?

• A. Verification of a new employee's history
• B. Background Check
• C. Access Standards
• D. Deactivation Policies

Answer: (B)

Vetting a candidate before provisioning access is about confirming who they are and whether they’re suitable for the role, and a background check is the process that does exactly that. A background check gathers and verifies information like identity, past employment, education, and, where relevant, criminal history or other factors to assess trustworthiness before granting access to systems or facilities. This upfront verification helps prevent granting access to someone who misrepresents themselves or who poses a risk. Other options describe related ideas but not the pre‑provisioning vetting itself: verifying a new employee’s history is similar in spirit but is not the standard term for the formal due diligence process; access standards outline what access is allowed for different roles rather than how candidates are vetted; deactivation policies deal with removing access after termination, not with pre‑access verification.

Vetting a candidate before provisioning access is about confirming who they are and whether they’re suitable for the role, and a background check is the process that does exactly that. A background check gathers and verifies information like identity, past employment, education, and, where relevant, criminal history or other factors to assess trustworthiness before granting access to systems or facilities. This upfront verification helps prevent granting access to someone who misrepresents themselves or who poses a risk.

Other options describe related ideas but not the pre‑provisioning vetting itself: verifying a new employee’s history is similar in spirit but is not the standard term for the formal due diligence process; access standards outline what access is allowed for different roles rather than how candidates are vetted; deactivation policies deal with removing access after termination, not with pre‑access verification.