Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 12

What security procedure forces collusion between two operators of different categories to have access to unauthorized data?

A. enforcing regular password changes

B. management monitoring of audit logs

C. limiting the specific accesses of operations personnel

D. job rotation of people through different assignments

Step 1 of 2

Separation of duties

The principle of separation of duties prevents unauthorized access to data. The access rights of different personnel can be planned based on the type of work they need to do.

Thus, the correct option is.