Detections
Analytics
800-53|AC-5
Title
SEPARATION OF DUTIESDescription
The organization:Supplemental
Separation of duties addresses the potential for abuse of authorized privileges and helps to reduce the risk of malevolent activity without collusion. Separation of duties includes, for example: (i) dividing mission functions and information system support functions among different individuals and/or roles; (ii) conducting information system support functions with different individuals (e.g., system management, programming, configuration management, quality assurance and testing, and network security); and (iii) ensuring security personnel administering access control functions do not also administer audit functions.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AC-3,AC-6,PE-3,PE-4,PS-2
Category: ACCESS CONTROL
Family: ACCESS CONTROL
Priority: P1
Baseline Impact: MODERATE,HIGH
Audit Items
View all Reference Audit Items