CISSP Question #162: Real Exam Question with Answer & Explanation

Question

Refer to the information below to answer the question. An organization experiencing a negative financial impact is forced to reduce budgets and the number of Information Technology (IT) operations staff performing basic logical access security administration functions. Security processes have been tightly integrated into normal IT operations and are not separate and distinct roles. Which of the following will MOST likely allow the organization to keep risk at an acceptable level?

Options

• AIncreasing the amount of audits performed by third parties
• BRemoving privileged accounts from operational staff
• CAssigning privileged functions to appropriate staff
• DSeparating the security function into distinct roles