What is the principle of separation of duties?
- A.B. Critical tasks require multiple people so that no single person can complete a sensitive action alone
- B.A. Each employee works in a separate office
- C.C. Employees should specialize in only one area
- D.D. IT and security should be the same department
Why A is correct
Separation of duties requires that critical tasks be divided among multiple people to prevent fraud, errors, and abuse of power. For example, the person who writes checks should not be the same person who approves payments. This creates checks and balances.
Know someone studying for Security Fundamentals? Send them this one.