SSCP · Question #164
Which of the following is NOT a form of detective administrative control?
The correct answer is C. Separation of duties. Detective administrative controls warn of administrative control violations. Rotation of duties, required vacations and security reviews and audits are forms of detective administrative controls. Separation of duties is the practice of dividing the steps in a system function…
Question
Which of the following is NOT a form of detective administrative control?
Options
- ARotation of duties
- BRequired vacations
- CSeparation of duties
- DSecurity reviews and audits
How the community answered
(36 responses)- A3% (1)
- C94% (34)
- D3% (1)
Explanation
Detective administrative controls warn of administrative control violations. Rotation of duties, required vacations and security reviews and audits are forms of detective administrative controls. Separation of duties is the practice of dividing the steps in a system function among different individuals, so as to keep a single individual from subverting the process, thus a preventive control rather than a detective control.
Topics
Community Discussion
No community discussion yet for this question.