The steps required to issue a new employee a password should be specified in a ________.

• A. procedure
• B. process
• C. Both A and B
• D. Neither A nor B

Answer: (A)

Issuing a password to a new employee is a concrete, repeatable task that benefits from prescriptive steps. A procedure defines the exact sequence of actions, who performs them, what data is used, and what checks or approvals are required, ensuring consistency, security, and auditability each time the task is done. In contrast, a process describes the broader workflow and outcomes (like provisioning an account or onboarding) at a higher level and may not specify the precise steps to issue a password. By placing the task in a procedure, organizations can enforce a uniform, auditable method for securely generating, delivering, and documenting credentials.