Which of the following policies helps reduce the potential damage from the actions of one person?

The correct answer is C. Separation of duties. Separation of duties (SoD) is a security control that divides critical tasks among multiple individuals so that no single person has end-to-end control over a sensitive process. This limits the damage any one malicious or negligent actor can cause, since completing a harmful…

Security Program Development

Question

Options

ACSA
BRisk assessment
CSeparation of duties
DInternal audit

How the community answered

(33 responses)

A
6% (2)
B
3% (1)
C
88% (29)
D
3% (1)

Explanation

Separation of duties (SoD) is a security control that divides critical tasks among multiple individuals so that no single person has end-to-end control over a sensitive process. This limits the damage any one malicious or negligent actor can cause, since completing a harmful action would require collusion. CSA (Cloud Security Alliance) is a standards body, risk assessment identifies and evaluates risks, and internal audit reviews controls after the fact - none of them directly limit one person's destructive capability the way SoD does.

Topics

#Separation of Duties#Preventative Controls#Internal Controls#Fraud Prevention

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSMP Practice