Question

Karen is designing a process for issuing checks and decides that one group of users will have the authority to create new payees in the system while a separate group of users will have the authority to issue checks to those payees. The intent of this control is to prevent fraud. Which principle is Karen enforcing?A. Job rotation B. Least privilege C. Need-to-know D. Separation of duties

Answer 1

Answer:

D. Separation of Duties

Explanation:

Separation of duties also know as segregation of duties refuses that one person he responsible of acquisition of assets, their custody and related record keeping. The process in which Karen is using to prevent fund by separating individuals who as the authority to issue checks is known as separation of duties. It is a form of internal control aimed at reducing risk of errors and frauds.