week 4

Separation of Duties

Discuss the importance of separation of duties for personnel. Describe the reasons why separation of duties is a critical requirement for policy framework compliance. Discuss examples of roles you would separate and why. For example, an administrator has full administrative server login access, and a network technician has limited administrative access but can view system login details. Payroll has access to employee financial records, but only payroll managers can approve raises. Describe your methodology for creating a security policy.