Interested to Buy Any Domain ? << Click Here >> for more details...
A System programmer have access to computer room, it is
possible that he may undertake some unauthorised activities
at any time, due to his deep knowledge how can a control
build to avoid the risk?
- 3 Answers
- 6975 Views
- Wipro, I also Faced
- E-Mail Answers
Answer Posted / nimesh maru
This is answered with the CISSP perspective.
implement 1] Seperation of Duties : This will make sure that
one individual cannot complete a critical task by himself.
so we would have 2 ,3 or 4 people doing the 1 task.
Now if they want to do something malicious or unathorized
they all would have to come together to perform the task,
which detters the person from doing it. This act of all
people coming together to complete the task is also called
Collusion.
Further Seperation of duties shall be broken down in to
Split Know ledge and Dual Control.
Split Knowledge : No one person has complete knowledge of
performing one task or required information.
Dual control : here 2 or more individuals must be present
and active in participation to complete the task.
2]Job rotation : No One person should stay in one position
for long period of time as they would then have good
knowledge and would know inside out of entire process and
would be able to bypass or circumvent controls put in place
for the santity of the process and compliance.
| Is This Answer Correct ? | 1 Yes | 2 No |
Post New Answer View All Answers
What are the types of LAN cables used? What is a cross cable?
What is Cross Site Request Forgery and how to defend against it?
What is a Password?
What is the difference between cybersecurity and information security?
What is the sense of a fingerprint?
How to implement PIX firewall security?
Why do we use virtual private network?
What do you do when you get blue screen in a computer? How do you troubleshoot it?
In context of public key encryption, if you are using both signature and encryption features, what key will you use for encryption and which one will you use for signing?
What are all the technical steps involved when the data transmission from server via router?
Explain the difference between broadcast domain and collision domain?
What is terminal emulation, in which layer it comes
What is an arp?
How does network security work?
What are Digrams and Trigrams
