Can a Subject use multiple short duration accesses within a 12-month period, if necessary?

Can a Subject use multiple short duration accesses within a 12-month period, if necessary?

• A. Yes
• B. No
• C. Yes, with supervisor approval
• D. Only for certain categories

Answer: (B)

Access controls are built to keep permissions tight and traceable. A Subject is allowed a single short-duration access within a 12-month window to perform a defined task. Allowing multiple short-duration accesses in the same year would blur accountability, make it harder to revoke access when the task is completed, and complicate auditing. The safeguards rely on a single, time-limited window that is easy to review and revoke if needed. If more access is truly required, the proper path is to obtain a new, separate authorization with justification (or a longer-term authorization) through the usual approval process. This is why the best answer is that multiple short-duration accesses within a year are not permitted.

Access controls are built to keep permissions tight and traceable. A Subject is allowed a single short-duration access within a 12-month window to perform a defined task. Allowing multiple short-duration accesses in the same year would blur accountability, make it harder to revoke access when the task is completed, and complicate auditing. The safeguards rely on a single, time-limited window that is easy to review and revoke if needed. If more access is truly required, the proper path is to obtain a new, separate authorization with justification (or a longer-term authorization) through the usual approval process. This is why the best answer is that multiple short-duration accesses within a year are not permitted.