Which element is typically evaluated in an access control system audit?

Which element is typically evaluated in an access control system audit?

• A. Network bandwidth
• B. Credential validity
• C. Employee payroll data
• D. Physical plant layout

Answer: (B)

Access control system audits mainly verify that presented credentials are valid and properly managed. The focus is on ensuring badges, PINs, or biometrics are current, correctly linked to an active and authorized user, and that issuance, updates, and revocation are handled promptly and accurately. The audit checks that credentials are assigned to the right people, that access rights match roles, that expired or revoked credentials cannot grant entry, and that there are reliable logs showing who accessed which doors and when. While other areas like network performance, payroll data, or overall facility layout may relate to broader security or operations considerations, they are not the primary elements evaluated when confirming the effectiveness and integrity of an access control system.

Access control system audits mainly verify that presented credentials are valid and properly managed. The focus is on ensuring badges, PINs, or biometrics are current, correctly linked to an active and authorized user, and that issuance, updates, and revocation are handled promptly and accurately. The audit checks that credentials are assigned to the right people, that access rights match roles, that expired or revoked credentials cannot grant entry, and that there are reliable logs showing who accessed which doors and when. While other areas like network performance, payroll data, or overall facility layout may relate to broader security or operations considerations, they are not the primary elements evaluated when confirming the effectiveness and integrity of an access control system.