SECURITY POLICY & STANDARTS
A fundamental component of internal control is the separation of duties for high-risk transactions. The underlying separation of duties concept is that no individual should be able to execute a high-risk transaction, conceal errors, or commit fraud in the normal course of their duties.
You can apply separation of duties at either a transactional or an organizational level. For example, payroll has access to employee financial records, but only payroll managers can approve raises.
Answer the following question(s):
- How do you define a high-risk transaction?
- If you were a security professional in a company, what are four roles (two sets of two related roles) you would separate and why?
3 years ago
5
other Questions(10)
- marketing discussion ******must use book reference****** professor is a stickler for work
- society writing 3 pg's
- 1. Draw an ER diagram that captures the preceding information. Identify any constraints not captured by the ER diagram
- journal 4
- Assignment
- A 10 page paper for a biology senior seminar class. the topic is on blindness and poverty. minimum of 5...
- For Phyllis Young only.
- Ratio Analysis
- Public admin
- theories intersects