Which of the following is not a form of detective administrative control?
A.
Rotation of duties
B.
Required vacations
C.
Separation of duties
D.
Security reviews and audits
Explanation:
Separation of duties is a PREVENTIVE Administrative Control.
The other 3 are DETECTIVE Administrative Controls.Detective Administrative Controls
Detective administrative controls are used to determine how well security policies and procedures
are complied with, to detect fraud, and to avoid employing persons that represent an unacceptable
security risk. This type of control includes:
•Security reviews and audits.
•Performance evaluations.
•Required vacations.
•Background investigations.
•Rotation of duties.
Reference: http://cccure.org/Documents/HISM/015-019.html