If an employee transfers from one role to another, which of the following actions should...

 User access review and adjustment is the action that should be triggered within the identity and access management (IAM) lifecycle when an employee transfers from one role to another. IAM is the process of identifying, authenticating, authorizing, and managing the users and their access rights to the organization’s resources and systems. The IAM lifecycle consists of four phases: provisioning, maintenance, review, and deprovisioning. When an employee transfers from one role to another, their access rights may need to be changed or updated to reflect their new responsibilities and duties. This requires a user access review and adjustment, which is part of the maintenance phase of the IAM lifecycle. User access review and adjustment involves verifying and validating the user’s identity and current access rights, and modifying or revoking the access rights as needed, based on the principle of least privilege and the organization’s policies and standards. The other options are not correct. New account creation is part of the provisioning phase of the IAM lifecycle, and it is not necessary when an employee transfers from one role to another, unless the employee needs to access a new system or resource that requires a separate account. Deprovisioning is part of the deprovisioning phase of the IAM lifecycle, and it involves deleting or disabling the user’s account and access rights when the user leaves the organization or no longer needs access to the system or resource. System account access review and adjustment is not a specific action within the IAM lifecycle, although it may be part of the user access review and adjustment process, if the user has access to system accounts or privileges. References: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 5: Communication and Network Security, page 615. Official (ISC)2 CISSP CBK Reference, Fifth Edition, Chapter 5: Communication and Network Security, page 616.