A security administrator is updating corporate policies to respond to an incident involving collusion between two systems administrators that went undetected for more than six months. Which of the…

The correct answer is B. Separation of duties F. Job rotation. Separation of duties (B) divides critical tasks across multiple roles so that no single individual - or colluding pair - can complete a sensitive action alone without oversight from outside their group. It makes collusion structurally harder to execute without detection. Job…

Risk Management

Question

A security administrator is updating corporate policies to respond to an incident involving collusion between two systems administrators that went undetected for more than six months. Which of the following policies would have MOST likely uncovered the collusion sooner? (Choose two.)

Options

AMandatory vacation
BSeparation of duties
CContinuous monitoring
DIncident response
ETime-of-day restrictions
FJob rotation

How the community answered

(46 responses)

A
2% (1)
B
83% (38)
C
4% (2)
D
2% (1)
E
9% (4)

Explanation

Separation of duties (B) divides critical tasks across multiple roles so that no single individual - or colluding pair - can complete a sensitive action alone without oversight from outside their group. It makes collusion structurally harder to execute without detection. Job rotation (F) periodically moves employees into different roles, causing others to review and take over their prior responsibilities; this surfaces cover-ups and inconsistencies that sustained collusion requires. Mandatory vacation (A) has a similar effect but was not selected as a primary answer here. Continuous monitoring (C) and incident response (D) are reactive. Time-of-day restrictions (E) address when access occurs, not collaborative abuse of access.

Topics

#separation of duties#job rotation#insider threat#security policy

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice