CAS-002 · Question #344
After a security incident, an administrator would like to implement policies that would help reduce fraud and the potential for collusion between employees. Which of the following would help meet…
The correct answer is B. Job rotation. Job rotation deters fraud and collusion by periodically moving employees through different roles, creating natural peer audits of each position.
Question
After a security incident, an administrator would like to implement policies that would help reduce fraud and the potential for collusion between employees. Which of the following would help meet these goals by having co-workers occasionally audit another worker's position?
Options
- ALeast privilege
- BJob rotation
- CMandatory vacation
- DSeparation of duties
How the community answered
(34 responses)- A3% (1)
- B88% (30)
- C3% (1)
- D6% (2)
Why each option
Job rotation deters fraud and collusion by periodically moving employees through different roles, creating natural peer audits of each position.
Least privilege restricts what resources a user may access but does not involve co-workers periodically reviewing or taking over each other's duties.
Job rotation requires employees to periodically assume different roles, meaning a co-worker regularly takes over and reviews another person's responsibilities and records. This ongoing cross-review makes it difficult to sustain long-term fraud or maintain colluding arrangements because any irregularities left behind are exposed when the next employee assumes the position.
Mandatory vacation temporarily removes an employee and allows a substitute to cover the role, but it is not specifically designed around co-workers routinely auditing each other's positions.
Separation of duties divides a single critical task among multiple people to prevent unilateral fraud, but it does not involve rotating employees through positions to audit one another's work.
Concept tested: Job rotation as fraud and collusion deterrence control
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.