Separation of Duties
Separation of Duties is an important security concept in which critical, significant, and sensitive work tasks are divided among several individual administrators or high-level operators.
Separation of Duties serves two function
1. Principle of least privilege: According to this principle, users needs to be given access to only those resource that is essential to carry out task under job responsibilities.
2. Protection against collusion: Collusion is the occurrence of negative activity undertaken by two or more people for the purposes of fraud, theft, or espionage.
How is collusion prevented with separation of duties?
- Deterrence effect. The chance that they might get caught will discourage them.
- Collusion is difficult and increases risk to the initiator prior to the commission of the act.
