ISC2 Certified in Cybersecurity (CC) Practice Question

Segregation of duties reduces the chance that a single individual can both commit and conceal wrongdoing. Having one employee enter payroll data while a separate employee approves the payroll run splits initiation from authorization, so collusion would be required to perpetrate fraud. Allowing one person to both add employees and issue paychecks concentrates control and violates the principle. Strong passwords and database encryption are valuable security measures, but they address authentication and confidentiality, not the division of critical responsibilities that SoD requires.