CISSP-ISSMP: Information Systems Security Management Professional

Question

You are the Network Administrator for a defense contractor. Your company handles sensitive materials, and all IT personnel hold at least a secret-level clearance. You remain concerned that a single individual could compromise the network—intentionally or unintentionally—by establishing improper or unauthorized remote access. What is the best way to prevent this problem?

Explanation

Separation of duties assigns conflicting administrative functions to different individuals or roles, preventing a single administrator from independently establishing and concealing unauthorized remote access. It reduces the potential for abuse of authorized privileges without collusion.

Learn more

NIST SP 800-171 Rev. 3 — Separation of Duties

CISSP-ISSMP: Information Systems Security Management Professional

AstroTutor

Notes

Readiness

QuestionQ132

Community Discussion