A manager suspects that an IT employee with elevated database access may be knowingly modifying financial transactions for the benefit of a competitor. Which of the following practices should the manager implement
to validate the concern?
A. Separation of duties
B. Mandatory vacations
C. Background checks
D. Security awareness training
Answer is B, to validate the concern, you put that person on vacation while investigating the issue.
2
0