A security manager wants to implement a policy that will management with the ability to monitor employees' activities with minimum impact to productivity. Which of the following policies Is BEST…

The correct answer is A. Separation of duties. Separation of duties divides critical tasks and responsibilities among multiple employees so that no single individual can complete a sensitive process alone. This inherently creates management visibility into workflows through required approvals, handoffs, and cross-checks…

Risk Management

Question

A security manager wants to implement a policy that will management with the ability to monitor employees' activities with minimum impact to productivity. Which of the following policies Is BEST suited for this scenario?

Options

ASeparation of duties
BMandatory vacations
CLeast privilege
DIncident response

How the community answered

(44 responses)

A
91% (40)
B
5% (2)
C
2% (1)
D
2% (1)

Explanation

Separation of duties divides critical tasks and responsibilities among multiple employees so that no single individual can complete a sensitive process alone. This inherently creates management visibility into workflows through required approvals, handoffs, and cross-checks that are embedded in normal business processes - enabling oversight with minimal productivity impact. Mandatory vacations (B) can expose fraud by forcing coverage rotation, but they directly interrupt productivity. Least privilege (C) restricts access rights but does not provide ongoing monitoring of activities. Incident response (D) is a reactive framework triggered after a security event, not a proactive monitoring policy.

Topics

#mandatory vacation#insider threat#employee monitoring#access control policy

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice