What is the purpose of separation of duties?

The correct answer is A. To ensure that no single user has complete control over a critical process or system. The purpose of separation of duties is to ensure that no single user has complete control over a critical process or system, in order to reduce the risk of insider threats and limit the potential damage that could be caused by a compromised account.

Security Principles

Question

Options

ATo ensure that no single user has complete control over a critical process or system.
BTo ensure that security controls are implemented based on the perceived risk to level of each
CTo ensure that security policies are consistent across all resources.
DTo ensure that all users have equal access to all resources on a network.

How the community answered

(36 responses)

A
92% (33)
B
3% (1)
C
6% (2)

Explanation

The purpose of separation of duties is to ensure that no single user has complete control over a critical process or system, in order to reduce the risk of insider threats and limit the potential damage that could be caused by a compromised account.

Topics

#separation of duties#security principles#internal controls#risk mitigation

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice