Question

Alan is developing the access control system for a new accounting system and implements a control that mandates that no individual may have both the permission to create a new vendor and issue a check. What security principle is most directly related to his actions?

A. Defense in depth
B. Separation of duties
C. Need to know
D. Least privilege

Answer 1

The security principle that is most directly related to Alan's actions is Separation of duties. By mandating that no individual may have both the permission to create a new vendor and issue a check, Alan is following the principle of separation of duties.

Step-by-step explanation:

The security principle that is most directly related to Alan's actions is Separation of duties. The security principle that is most directly related to Alan's actions is Separation of duties. By mandating that no individual may have both the permission to create a new vendor and issue a check, Alan is following the principle of separation of duties.

Separation of duties is a principle that aims to prevent fraud and enhance security by ensuring that no single individual has control over all aspects of a critical process. By mandating that no individual may have both the permission to create a new vendor and issue a check, Alan is following the principle of separation of duties.