Which are the rules governing access and usage of resources?

Which are the rules governing access and usage of resources?

• A. Identity Attributes
• B. Onboarding
• C. Security Policies
• D. Access Administration Cost

Answer: (C)

Security policies govern access to resources by specifying who can access what, under which conditions, and how that access is enforced. They provide the rules, and the controls and procedures that IAM systems implement to ensure authentication, authorization, auditing, and ongoing compliance. This governance layer translates business requirements into enforceable access controls, supporting principles like least privilege and need-to-know. Identity attributes describe the data about a user that policies use to make decisions, but they aren’t the rules themselves. Onboarding is the provisioning process, and cost is a consideration, not the rule.

Security policies govern access to resources by specifying who can access what, under which conditions, and how that access is enforced. They provide the rules, and the controls and procedures that IAM systems implement to ensure authentication, authorization, auditing, and ongoing compliance. This governance layer translates business requirements into enforceable access controls, supporting principles like least privilege and need-to-know. Identity attributes describe the data about a user that policies use to make decisions, but they aren’t the rules themselves. Onboarding is the provisioning process, and cost is a consideration, not the rule.