Which of the following provides the BEST explanation regarding why an organization needs to implement
IT security policies?

Which of the following should Pete, a security manager, implement to reduce the risk of employees
working in collusion to embezzle funds from their company?

Two members of the finance department have access to sensitive information. The company is concerned
they may work together to steal information. Which of the following controls could be implemented to
discover if they are working together?

Mandatory vacations are a security control which can be used to uncover which of the following?

While rarely enforced, mandatory vacation policies are effective at uncovering:

A company that has a mandatory vacation policy has implemented which of the following controls?

Which of the following should Joe, a security manager, implement to reduce the risk of employees
working in collusion to embezzle funds from his company?

A company is looking to reduce the likelihood of employees in the finance department being involved
with money laundering. Which of the following controls would BEST mitigate this risk?

The Chief Security Officer (CSO) is concerned about misuse of company assets and wishes to determine
who may be responsible. Which of the following would be the BEST course of action?

A software developer is responsible for writing the code on an accounting application. Another software
developer is responsible for developing code on a system in human resources. Once a year they have to
switch roles for several weeks.
Which of the following practices is being implemented?