Question

Sue is the manager of a group of system administrators and is in charge of approving all requests for administrative rights. In her role, she files a change request to grant a staff member administrative rights and then approves it. What personnel control would best help to prevent this abuse of her role?

A. Mandatory vacation
B. Separation of duties
C. Succession planning
D. Dual control

Answer 1

The best personnel control to prevent the abuse of role like in Sue's case is 'separation of duties', which ensures no single individual has too much control and creates a system of checks and balances.

Step-by-step explanation:

To prevent abuse of role as seen with Sue, who is in charge of approving requests for administrative rights and then approves her own requests, the best personnel control to implement is separation of duties. This means that the responsibilities for authorizing, processing, and reviewing transactions should be divided among multiple individuals. It helps to ensure that no single individual has too much control over any aspect of the transaction process, creating a system of checks and balances. For example, one person should file the request for administrative rights, while another, ideally with equal or higher authority, should approve the request to maintain accountability and mitigate the risk of fraud or errors.