1.2.5 Conflicting duties and conflicting areas of responsibility shall be segregated, where applicable.

Requirement

Conflicting duties and conflicting areas of responsibility shall be segregated, where applicable.

Guidance

• Consider segregating conflicting duties and areas of responsibility to reduce opportunities for unauthorized or unintentional modification or misuse of the entity’s asset. As a minimum, consider that the reviewer (auditor) must be different from the personnel or the line of authority of the area under review.
• The results of the risk assessment or the business impact analysis (BIA) could be used to identify potential conflicting duties and areas of responsibility.

Examples of evidence

• Up-to-date documentation of the structure of security role assignments and responsibilities.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

3. Reglementări asociate

Tichete legate

• ENISA -