CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What is the purpose of separation of duties?
- A.To ensure every employee can perform every task
- B.To ensure all tasks are automated
- C.To separate work duties from personal duties
- D.To divide critical tasks among multiple people so that no single person can abuse the system
Why D is correct
Separation of duties divides critical functions among different people to prevent fraud and errors. For example, the person who approves a purchase order should not be the same person who processes the payment. This reduces the risk of a single individual having enough control to commit and conceal unauthorized actions.
Know someone studying for Security Fundamentals? Send them this one.