Which of the following statements about user access de$-$provisioning is FALSE?

Removing someone's access does not create risk for the system.

User access de$-$provisioning should occur after an employee's termination or

transfer.

User access de$-$provisioning is the formal process of changing a user's access.

Removing access to systems is not required for employee promotions.