CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What is the principle of separation of duties?
- A.Employees should specialize in only one area
- B.Critical tasks require multiple people so that no single person can complete a sensitive action alone
- C.Each employee works in a separate office
- D.IT and security should be the same department; separation of duties requires one person to own every stage of a process
Why B is correct
Separation of duties requires that critical tasks be divided among multiple people to prevent fraud, errors, and abuse of power. For example, the person who writes checks should not be the same person who approves payments. This creates checks and balances.
Know someone studying for Security Fundamentals? Send them this one.