Which of the following is not a form of detective administrative control?

A.
Rotation of duties

B.
Required vacations

C.
Separation of duties

D.
Security reviews and audits

Explanation:
Separation of duties is a PREVENTIVE Administrative Control. The other 3 are DETECTIVE
Administrative Controls. Detective Administrative Controls Detective administrative controls are
used to determine how well security policies and procedures are complied with, to detect fraud, and
to avoid employing persons that represent an unacceptable security risk. This type of control
includes: • Security reviews and audits. • Performance evaluations. • Required vacations. •
Background investigations. • Rotation of duties. Reference:
http://cccure.org/Documents/HISM/015-019.html