The Chief Security Officer (CSO) is concerned about misuse of company assets and wishes to determine who may be responsible. Which of the following would be the BEST course of action?

Question

Options

• ACreate a single, shared user account for every system that is audited and logged based upon time of use.
• BImplement a single sign-on application on equipment with sensitive data and high-profile shares.
• CEnact a policy that employees must use their vacation time in a staggered schedule.
• DSeparate employees into teams led by a person who acts as a single point of contact for observation purposes.

• A
  3% (1)
• B
  10% (3)
• C
  83% (25)
• D
  3% (1)

Explanation

Mandatory vacation (staggered vacation schedules) is a well-established security control used to detect insider fraud and asset misuse. When an employee is required to take time off and another person covers their duties, fraudulent activities they have been concealing - such as manipulating records or covering unauthorized transactions - are more likely to be discovered. This is a standard control in financial and regulated industries. Shared accounts (Option A) destroy individual accountability and make attribution impossible - the opposite of what's needed. Single sign-on (Option B) improves convenience but does not directly detect misuse or identify the responsible party. Separating into teams with a single point of contact (Option D) may improve reporting structure but does not provide the detection mechanism that mandatory rotation does.

No community discussion yet for this question.