Separation of duty can be:

A.
Dynamic only

B.
Encrypted

C.
Static only

D.
Static or dynamic

Explanation:
Separation of duty can be either static or dynamic. Compliance with static separation requirements
can be determined simply by the assignment of individuals to roles and allocation of transactions to
roles. The more difficult case is dynamic separation of duty where compliance with requirements
can only be determined during system operation. The objective behind dynamic separation of duty is
to allow more flexibility in operations.