ISC2 Certified in Cybersecurity (CC) Practice Question

Segregation of duties requires that critical tasks be split so no single person can both perpetrate and conceal errors or fraud. Having one employee enter vendor invoices while a different employee approves payment separates the initiation and authorization functions, reducing opportunity for misuse. Allowing the same individual to create accounts and audit them, letting one cashier both handle and reconcile cash, or sharing a generic admin account each violate SoD by concentrating conflicting responsibilities in one person or obscuring accountability.