1.2.5 Conflicting duties and conflicting areas of responsibility shall be segregated, where applicable.

Requirement

Conflicting duties and conflicting areas of responsibility shall be segregated, where applicable.

Guidance

• Consider segregating conflicting duties and areas of responsibility to reduce opportunities for unauthorized or unintentional modification or misuse of the entity’s asset. As a minimum, consider that the reviewer (auditor) must be different from the personnel or the line of authority of the area under review.
• The results of the risk assessment or the business impact analysis (BIA) could be used to identify potential conflicting duties and areas of responsibility.

Examples of evidence

• Up-to-date documentation of the structure of security role assignments and responsibilities.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

Propojené úkoly

• ENISA -