Within change management, which of the following ensures functions are earned out by multiple employees?

The correct answer is A. Least privilege. Separation of Duties (the concept described in option C, mislabeled here as 'Separator of duties') is the control that requires multiple employees to complete critical functions - no single person can control an entire sensitive process end-to-end. This prevents insider fraud…

Risk Management

Question

Options

ALeast privilege
BMandatory vacation
CSeparator of duties
DJob rotation

How the community answered

(24 responses)

A
92% (22)
B
4% (1)
C
4% (1)

Explanation

Separation of Duties (the concept described in option C, mislabeled here as 'Separator of duties') is the control that requires multiple employees to complete critical functions - no single person can control an entire sensitive process end-to-end. This prevents insider fraud and reduces risk. Least Privilege (A) is a different control: it restricts each user to the minimum permissions needed for their role. Mandatory vacation (B) helps detect fraud by forcing others to cover tasks. Job rotation (D) also helps by exposing irregularities, but it moves employees between roles over time rather than splitting a single task. For 'multiple people performing a function simultaneously,' Separation of Duties is the precise answer.

Topics

#separation of duties#change management#least privilege#access control

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice