Which statement best describes the supervisor's role in SIDA access management?

Which statement best describes the supervisor's role in SIDA access management?

• A. Supervisors verify access needs, enforce compliance, and escalate issues to Security as needed.
• B. Supervisors grant access to anyone who requests it without review.
• C. Supervisors handle badge printing for visitors.
• D. Supervisors only review access matters during annual audits.

Answer: (A)

Supervisors are responsible for overseeing SIDA access by confirming that each person’s access matches their actual duties, enforcing compliance with the security policies, and quickly escalating issues to Security when something looks off. This approach keeps access from drifting beyond what a person needs (the principle of least privilege), supports accountability, and ensures problems are addressed fast—whether it’s a change in role, a contract ending, or a potential misuse of credentials. When a concern arises, Security can investigate and handle the appropriate actions, such as revoking access or conducting a formal review. Granting access without review bypasses controls, which is not appropriate. Badge printing for visitors is typically handled by a separate administrative function, not the supervisor’s primary role. And reviewing access only during annual audits leaves gaps where improper or outdated access could go unchecked for long periods.

Supervisors are responsible for overseeing SIDA access by confirming that each person’s access matches their actual duties, enforcing compliance with the security policies, and quickly escalating issues to Security when something looks off. This approach keeps access from drifting beyond what a person needs (the principle of least privilege), supports accountability, and ensures problems are addressed fast—whether it’s a change in role, a contract ending, or a potential misuse of credentials. When a concern arises, Security can investigate and handle the appropriate actions, such as revoking access or conducting a formal review.

Granting access without review bypasses controls, which is not appropriate. Badge printing for visitors is typically handled by a separate administrative function, not the supervisor’s primary role. And reviewing access only during annual audits leaves gaps where improper or outdated access could go unchecked for long periods.