An organization recently set up a new IT infrastructure for internal use. Organizational leaders are worried about keeping track of users, privileges, and authentication. Which tool should be used to address this concern?

A continuity plan is focused on ensuring that critical business functions can continue during and after a disaster or unexpected disruption. While important for overall organizational resilience, it does not directly address the management of user identities, privileges, or authentication mechanisms.

Firewalls serve as a security barrier between an internal network and external threats, controlling incoming and outgoing network traffic. However, they do not manage user identities or privileges; their primary function is to protect the network from unauthorized access rather than to track users or handle authentication.

While educating employees about security best practices is crucial, it does not provide a systematic way to manage user identities and access rights. Employee education can enhance awareness but does not offer the technical capabilities required for tracking users and managing privileges effectively.