Which artifacts would you supply in response to a security audit finding about Tanium data access?

Which artifacts would you supply in response to a security audit finding about Tanium data access?

• A. Provide only a summary of the access controls without logs.
• B. Wait for the auditor to request specific artifacts.
• C. Focus on remediation steps and ignore access logs.
• D. Provide evidence of RBAC, access logs, data minimization, remediation steps, and audit artifacts.

Answer: (D)

When a security audit finding about Tanium data access is raised, you want to show a complete, verifiable trail that proves access is defined, enforced, and monitored. Provide evidence of RBAC by detailing the roles, permissions, and how access is granted and reviewed, including who has what privileges and the scope of those privileges. Include access logs that are time-stamped and tied to user identities, showing what data was accessed, by whom, and when, along with the actions taken. This demonstrates accountability and traceability. Also show data minimization measures: policies and configurations that limit exposure to only what is necessary, examples of data masking or redaction, and results from data-access reviews. Include remediation steps taken in response to the finding, such as privilege reductions, policy updates, and timelines for closure. Finally, provide audit artifacts: policy documents, change-management records, approvals, risk assessments, testing results, and any external audit reports. This combination gives a complete, proactive, and verifiable package; the other options omit essential evidence or are too reactive.

When a security audit finding about Tanium data access is raised, you want to show a complete, verifiable trail that proves access is defined, enforced, and monitored. Provide evidence of RBAC by detailing the roles, permissions, and how access is granted and reviewed, including who has what privileges and the scope of those privileges. Include access logs that are time-stamped and tied to user identities, showing what data was accessed, by whom, and when, along with the actions taken. This demonstrates accountability and traceability.

Also show data minimization measures: policies and configurations that limit exposure to only what is necessary, examples of data masking or redaction, and results from data-access reviews. Include remediation steps taken in response to the finding, such as privilege reductions, policy updates, and timelines for closure. Finally, provide audit artifacts: policy documents, change-management records, approvals, risk assessments, testing results, and any external audit reports.

This combination gives a complete, proactive, and verifiable package; the other options omit essential evidence or are too reactive.