After a security incident, an administrator would like to implement policies that would help reduce fraud and the potential for collusion between employees. Which of the following would help meet…

The correct answer is B. Job rotation. Job rotation (B) involves moving employees through different roles or positions periodically. This directly satisfies the described goal: when someone rotates into a colleague's role, they inherently audit the work and processes of the previous occupant, making fraud and…

Enterprise Security

Question

After a security incident, an administrator would like to implement policies that would help reduce fraud and the potential for collusion between employees. Which of the following would help meet these goals by having co-workers occasionally audit another worker's position?

Options

ALeast privilege
BJob rotation
CMandatory vacation
DSeparation of duties

How the community answered

(34 responses)

A
6% (2)
B
88% (30)
C
3% (1)
D
3% (1)

Explanation

Job rotation (B) involves moving employees through different roles or positions periodically. This directly satisfies the described goal: when someone rotates into a colleague's role, they inherently audit the work and processes of the previous occupant, making fraud and collusion harder to sustain over time. Separation of duties (D) divides critical tasks among multiple people but does not involve peer auditing through position rotation. Mandatory vacation (C) forces employees away from their post - a related control that can reveal fraud but is a passive absence rather than active peer review. Least privilege (A) limits access rights but does not create a mechanism for co-workers to audit each other's roles.

Topics

#job rotation#fraud prevention#collusion mitigation#insider threat

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice