Two members of the finance department have access to sensitive information. The company is
concerned they may work together to steal information. Which of the following controls could be
implemented to discover if they are working together?
A.
Least privilege access
B.
Separation of duties
C.
Mandatory access control
D.
Mandatory vacations
Explanation:
Mandatory Access Control is outright wrong and Seperation of duties is the answer. Mandatory vacation will see legitimate processes requiring the two above mentioned employees to not successful thereby negatively affecting business continuity.
0
0