What is the main objective of proper separation of duties?

What is the main objective of proper separation of duties?
A .  To prevent employees from disclosing sensitive information.
B .  To ensure access controls are in place.
C .  To ensure that no single individual can compromise a system.
D .  To ensure that audit trails are not tampered with.

View Answer

Answer: C

Explanation: The primary objective of proper separation of duties is to ensure that one person acting alone cannot compromise the company’s security in any way. A proper separation of duties does not prevent employees from disclosing information, nor does it ensure that access controls are in place or that audit trails are not tampered with. Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, Chapter 12: Operations Security (Page 808).