1.2.5 Conflicting duties and conflicting areas of responsibility shall be segregated, where applicable.

Requirement

Conflicting duties and conflicting areas of responsibility shall be segregated, where applicable.

Guidance

• Consider segregating conflicting duties and areas of responsibility to reduce opportunities for unauthorized or unintentional modification or misuse of the entity’s asset. As a minimum, consider that the reviewer (auditor) must be different from the personnel or the line of authority of the area under review.
• The results of the risk assessment or the business impact analysis (BIA) could be used to identify potential conflicting duties and areas of responsibility.

Examples of evidence

• Up-to-date documentation of the structure of security role assignments and responsibilities.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

3. Powiązane regulacje

Powiązane zgłoszenia

• ENISA -