CISA · Question #116
Effective separation of duties in an online environment can BEST be achieved by utilizing:
The correct answer is B. access authorization tables.. Effective separation of duties in an online environment is best achieved by implementing access authorization tables, which technically restrict users to only the functions necessary for their specific roles.
Question
Effective separation of duties in an online environment can BEST be achieved by utilizing:
Options
- Aappropriate supervision.
- Baccess authorization tables.
- Ctransaction logging.
- Dwritten procedure manuals.
How the community answered
(20 responses)- B95% (19)
- D5% (1)
Why each option
Effective separation of duties in an online environment is best achieved by implementing access authorization tables, which technically restrict users to only the functions necessary for their specific roles.
Appropriate supervision is a compensatory control or a general management practice but does not technically enforce separation of duties in an online system.
Access authorization tables, often implemented as role-based access control (RBAC), provide a technical enforcement mechanism to separate duties by defining and restricting what specific users or roles can do within an application. This ensures that no single individual has conflicting permissions that could lead to fraud or error, directly achieving separation of duties.
Transaction logging provides an audit trail of actions performed but does not prevent unauthorized combinations of duties from being executed.
Written procedure manuals document responsibilities but rely on human adherence and do not technically enforce separation of duties within a system.
Concept tested: Separation of duties technical controls
Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/security-governance-rbac
Topics
Community Discussion
No community discussion yet for this question.