What practice helps prevent privilege creep in an ERP system?

• A. Grant all permissions to all users.
• B. Disable access reviews.
• C. Implement RBAC with least privilege and periodic access reviews.
• D. Ignore separation of duties.

Answer: (C)

Privilege creep happens when users accumulate permissions over time as their roles change, so they end up with more access than they actually need. The best way to stop this in an ERP is to use role-based access control, assign permissions to defined roles, and apply the principle of least privilege so each role only has what’s necessary. Pair that with periodic access reviews to detect and remove permissions that are no longer needed or in use. This keeps access aligned with current duties and prevents gradual buildup. Granting broad access to everyone bypasses essential controls, skipping reviews means you’ll miss creeping privileges, and ignoring separation of duties increases risk of conflicts and fraud.