StudyToCert

All certifications / CISA / Lessons

ISACA Certified Information Systems Auditor (CISA) 2024 job practice · Domain 5: Protection of information assets

Identity and access management: authentication, authorization, provisioning and access reviews

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Identity and access management (IAM) ensures that the right people and systems have the right access to the right resources, for the right reasons, and no more. Access control failures, such as leavers with active accounts, excessive privileges and shared administrator logins, are among the most common audit findings, so this topic is heavily tested. Every other control depends on it: segregation of duties, audit trails and data protection all assume that access is granted correctly and removed on time.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CISA for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CISA study plan