PCCET · Question #135
Only one manager can get company checks. Only a different manager can sign checks. This example describes which principle?
The correct answer is A. separation of duties. This scenario exemplifies the principle of separation of duties, where critical functions are divided among different individuals to prevent conflicts of interest and reduce the risk of fraud or error.
Question
Only one manager can get company checks. Only a different manager can sign checks. This example describes which principle?
Options
- Aseparation of duties
- Bauditability
- Cleast privilege
- Ddefense in depth
How the community answered
(42 responses)- A86% (36)
- B5% (2)
- C2% (1)
- D7% (3)
Why each option
This scenario exemplifies the principle of separation of duties, where critical functions are divided among different individuals to prevent conflicts of interest and reduce the risk of fraud or error.
Separation of duties is a security principle that divides critical functions and responsibilities among different individuals to prevent a single person from having excessive control that could lead to fraud or error. In this case, one manager's ability to get checks is separated from another manager's ability to sign them, creating a necessary control.
Auditability refers to the ability to examine and verify records and processes, which is a consequence of good controls like separation of duties but not the principle itself.
Least privilege dictates that users should only be granted the minimum necessary access rights or permissions to perform their job, which is related to access control but not the division of tasks.
Defense in depth involves implementing multiple layers of security controls to protect assets, which is a broader security strategy rather than a specific principle for task division.
Concept tested: Security principles (separation of duties)
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/identity-management-best-practices#enforce-least-privilege-and-separation-of-duties
Topics
Community Discussion
No community discussion yet for this question.