+03.01.04 Separation of Duties

03.01.04 Separation of Duties

Statement

  • a. Identify the duties of individuals requiring separation.

  • b. Define system access authorizations to support separation of duties.

Guidance

Separation of duties addresses the potential for abuse of authorized privileges and reduces the risk of malevolent activity without collusion. Separation of duties includes dividing mission functions and support functions among different individuals or roles, conducting system support functions with different individuals or roles (e.g., quality assurance, configuration management, network security, system management, assessments, and programming), and ensuring that personnel who administer access control functions do not also administer audit functions. Because separation of duty violations can span systems and application domains, organizations consider the entirety of their systems and system components when developing policies on separation of duties. This requirement is enforced by [](#/cprt/framework/version/SP_800_171_3_0_0/home?element=03.01.02) 03.01.02.

Assessment objective

duties of individuals requiring separation are identified.

Assessment objective

system access authorizations to support separation of duties are defined.

Assessment method

  • access control policy and procedures procedures for the separation of duties and the division of responsibilities system configuration settings system audit records system access authorizations list of divisions of responsibility and separation of duties system security plan other relevant documents or records

Assessment method

  • personnel with responsibilities for defining the separation of duties and the division of responsibilities personnel with information security responsibilities system administrators

Assessment method

  • mechanisms for implementing the separation of duties policy

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by 03.01.04 Separation of Duties – Assessment Procedure
is blocked by Defining Access Authorizations for Sensitive / Regulated Data
is blocked by Separation of Duties (SoD)
is blocked by Incompatible Roles
is blocked by Access Enforcement
is blocked by Access To Sensitive / Regulated Data
is blocked by Least Privilege