Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 35

The order of acceptance has slightly changed in the past years. It was Iris that was the most accepted method three years ago but today we have Voice Pattern that is by far the most accepted. Here is the list from most accepted first to least accepted at the bottom of the list: Voice Pattern Keystroke pattern Signature Hand geometry Handprint Fingerprint Iris Retina pattern

Explanation/Reference:
Explanation:
The most critical part of establishing and maintaining a current continuity plan is management support.
Management must be convinced of the necessity of such a plan. Therefore, a business case must be made to obtain this support.
In order to convince Senior Management of the viability of the plan you need to convince them of the business case. The Senior Management usually wants information stated in monetary, quantitative terms, not in subjective, qualitative terms.
Incorrect Answers:
B: Senior Management does not need to attend the Risk Assessment meetings.
C: Senior Management does not need to attend the Business Impact Assessment meetings.
D: The Business Impact Assessment is made after the BCP plan has been approved. To make a Business Impact Assessment the BCP team must sit down and discuss, preferably with the involvement of senior management, qualitative concerns to develop a comprehensive approach that satisfies all stakeholders.

The access management procedure that would minimize the possibility of an organization's employees retaining access to secure work areas after they change roles is user access modification. User access modification is a process that involves changing or updating the access rights or permissions of a user account based on the user's current role, responsibilities, or needs. User access modification can help to minimize the possibility of an organization's employees retaining access to secure work areas after they change roles, as it can ensure that the employees only have the access that is necessary and appropriate for their new roles, and that any access that is no longer needed or authorized is revoked or removed. User access recertification, user access termination, and user access provisioning are not access management procedures that can minimize the possibility of an organization's employees retaining access to secure work areas after they change roles, but they can help to verify, revoke, or grant the access of the user accounts, respectively. References: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 2: Asset Security, page 154; Official (ISC)2 Guide to the CISSP CBK, Fifth Edition, Chapter 2: Asset Security, page 146.