Which scenario demonstrates separation of duties in a TA setting?

Which scenario demonstrates separation of duties in a TA setting?

• A. A single person authorizes access changes and implements them without review.
• B. A single person handles all security tasks without oversight.
• C. One person authorizes access changes, another approves and logs them.
• D. Access changes are made automatically without review or logging.

Answer: (C)

Separation of duties means dividing key security tasks among different people so no one person can both authorize and implement changes, and so there’s an auditable trail of actions. In this scenario, one person initiates or authorizes access changes, while a different person handles the approval and creates a log of the activity. This division provides a check against mistakes or intentional misuse and creates accountability because the approval, implementation, and record-keeping are handled by multiple individuals. If a single person did everything, there would be no independent review and the risk of unauthorized or erroneous changes would rise. Likewise, making changes automatically without review or logging eliminates oversight and traceability, making it hard to detect improper activity.

Separation of duties means dividing key security tasks among different people so no one person can both authorize and implement changes, and so there’s an auditable trail of actions. In this scenario, one person initiates or authorizes access changes, while a different person handles the approval and creates a log of the activity. This division provides a check against mistakes or intentional misuse and creates accountability because the approval, implementation, and record-keeping are handled by multiple individuals. If a single person did everything, there would be no independent review and the risk of unauthorized or erroneous changes would rise. Likewise, making changes automatically without review or logging eliminates oversight and traceability, making it hard to detect improper activity.