1.2.5 Conflicting duties and conflicting areas of responsibility shall be segregated, where applicable.

Requirement

Conflicting duties and conflicting areas of responsibility shall be segregated, where applicable.

Guidance

• Consider segregating conflicting duties and areas of responsibility to reduce opportunities for unauthorized or unintentional modification or misuse of the entity’s asset. As a minimum, consider that the reviewer (auditor) must be different from the personnel or the line of authority of the area under review.
• The results of the risk assessment or the business impact analysis (BIA) could be used to identify potential conflicting duties and areas of responsibility.

Examples of evidence

• Up-to-date documentation of the structure of security role assignments and responsibilities.

1. Áttekintés

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

3. Kapcsolódó szabályozások

Kapcsolt feladatok

• ENISA -