How often must a user recertify for TIES access?

How often must a user recertify for TIES access?

• A. Every 2 years
• B. Every year
• C. Every 3 years
• D. Every 5 years

Answer: (A)

Periodic access reviews keep TIES usage aligned with current roles and needs, preventing former or unnecessary privileges from lingering. For TIES, the recertification interval is set at every two years, which provides a practical balance between security and administrative workload. Doing it annually would add substantial overhead without offering proportionally greater risk reduction, while longer intervals like three or five years leave a longer window for access that's no longer justified or needed. So, the two-year cycle is the standard practice to maintain proper access control.

Periodic access reviews keep TIES usage aligned with current roles and needs, preventing former or unnecessary privileges from lingering. For TIES, the recertification interval is set at every two years, which provides a practical balance between security and administrative workload. Doing it annually would add substantial overhead without offering proportionally greater risk reduction, while longer intervals like three or five years leave a longer window for access that's no longer justified or needed. So, the two-year cycle is the standard practice to maintain proper access control.