What Is Separation of Duties?
Show notes
Separation of duties is a control that divides a sensitive task or business process among multiple individuals or roles so that one person cannot complete every critical step independently. Certification exams may test this principle through scenarios involving financial transactions, system changes, account creation, or access approval. For example, one administrator may request a firewall change, another may approve it, and a third may implement or review it. This division reduces the opportunity for fraud, unauthorized activity, and undetected mistakes. Effective separation of duties requires clearly assigned responsibilities, independent approval, documented actions, and monitoring for users who accumulate conflicting roles. Organizations should also establish compensating controls when limited staffing makes complete separation difficult. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with. And dont forget Cyberauthor.me for the companion study guide and flash cards!