Susan Johnson knows the combination to a security container and Susan lost her clearance today, but she was not terminated from her job. What must happen?

Susan Johnson knows the combination to a security container and Susan lost her clearance today, but she was not terminated from her job. What must happen?

• A. The container must be moved
• B. The user must be re-cleared
• C. The combination on that security container must be changed
• D. The container must be replaced

Answer: (C)

When someone’s clearance changes so they should no longer access a secure item, the immediate protective step is to change the lock’s combination. The combination is the credential that opens the container, and if Susan still knows it, she could gain access despite the clearance change. Changing the combination immediately invalidates the old credential, effectively revoking her access without needing to physically move or replace the container. Re-clearing would not fit here because it would restore or adjust her access, which is contrary to the new clearance status. Moving the container doesn’t address the risk of the old combination still working, and replacing the container is unnecessary unless the hardware itself is compromised or there’s another broader security reason to do so.

When someone’s clearance changes so they should no longer access a secure item, the immediate protective step is to change the lock’s combination. The combination is the credential that opens the container, and if Susan still knows it, she could gain access despite the clearance change. Changing the combination immediately invalidates the old credential, effectively revoking her access without needing to physically move or replace the container.

Re-clearing would not fit here because it would restore or adjust her access, which is contrary to the new clearance status. Moving the container doesn’t address the risk of the old combination still working, and replacing the container is unnecessary unless the hardware itself is compromised or there’s another broader security reason to do so.