Which of the following would provide the MOST reliable evidence to indicate whether employee access has been deactivated in a timely manner following termination?
A . Comparing termination forms with dates in the HR system
B . Reviewing hardware return-of-asset forms
C . Interviewing supervisors to verify employee data is being updated immediately
D . Comparing termination forms with system transaction log entries
Answer: D