QS0032-02: Separation of Duties Policy

Question 1

QS0032-01: Separation of Duties Policy

Which departments are considered for short-term rotation during employee absence?

Answer 1

DevOps Administrators

Client application support

Question 2

QS0032-01: Separation of Duties Policy

Which control mechanism should be used to prevent an individual from accessing data that is not necessary to perform an assigned function?

Answer 2

Access control

Question 3

QS0032-01: Separation of Duties Policy

What should be established to ensure verification of activity or quality of work?

Answer 3

Workflows

Question 4

QS0032-01: Separation of Duties Policy

Suppose duties cannot be separated or subdivided. What action should be taken?

Answer 4

Implement compensating rules to mitigate associated business risk as agreed to by the application and systems owner.