Certified Information Security Manager CISM · Free Practice Question Easy
Question 130
What role does 'separation of duties' play in information security?
- A A. It ensures that no single individual has control over all aspects of any critical task
- B B. It divides the IT department into distinct units for better management
- C C. It requires that duties are rotated among employees on a regular basis
- D D. It mandates that all security tasks are outsourced
Reveal correct answer
Correct answer: A
Explanation
Explanation: Correct: Separation of duties is a key control to prevent fraud and errors by ensuring that critical tasks are divided among different individuals. Incorrect: B: Division into units is about organizational structure, not separation of duties. C: Duty rotation is a related concept but focuses on changing roles to detect fraud. D: Outsourcing is a strategic decision, not related to the principle of separation of duties.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
