Which of the following basic concepts are included in Access Management?
A. Verifying the identity of users requesting access to services.
B. Setting the rights or privileges of systems to allow access to authorized users.
C. Defining security policies for system access.
D. Monitoring the availability of systems that users should have access to.

The correct answer to this question is both A and B. Access management includes both verifying the users identity to request services and setting the rights and privileges of systems to allow authorized users. Access management is apart of the ITIL process, which stands for Information Technology Infrastruction Library.

This process was added in Version 3 of ITIL. The descison to include Access management was due to security reasons, such as allowing only certain users to access services and applications. Just as access can be granted in access management,, it can also be revoked. An access manager would be in charge of the access management process.