CMMC 1.0 Practice AC.3.017 Requirement:
Separate the duties of individuals to reduce the risk of malevolent activity without collusion.
CMMC 1.0 AC.3.017 Requirement Explanation:
Without the separation of duties security controls can easily be bypassed. By separating duties between individuals you can reduce the risk of malevolent activity.
Example CMMC 1.0 AC.3.017 Implementation:
Do not allow one person to be in charge of an entire critical task. Assign parts of the critical task to different persons.
CMMC 1.0 AC.3.017 Scenario(s):
- Scenario 1:
Alice handles the creation of user accounts and the assignment of account privileges. Your company periodically audits user accounts and their privileges. Instead of letting Alice do this you separate duties by assigning the auditing task to another employee.
Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:
Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.
Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.
Supply Chain Verifier
Trust is everything. Verify, monitor, and support subcontactor compliance.