What is a key reason to periodically audit access privileges in facility security?

• A. It increases security risk
• B. Privileges are still appropriate and unused access is revoked
• C. It reduces overall security
• D. It speeds up user logins

Answer: (B)

Periodic audits of access privileges reinforce the practice of least privilege by making sure each user’s rights still fit their current role. People change positions, leave, or take on different duties, and without regular reviews, dormant or unnecessary access can remain. Removing unused privileges reduces the number of ways someone could misuse or unintentionally expose sensitive areas, tightening security and supporting clear accountability through documented reviews of who has access to what.

The other ideas don’t fit because audits don’t inherently increase security risk or reduce overall security; they are a security control that strengthens protection. Nor do audits speed up user logins, since they focus on who actually has access rather than authentication speed.