NIST SP 800-171 & CMMC 2.0 Control 3.1.4 Requirement:
Separate the duties of individuals to reduce the risk of malevolent activity without collusion.
NIST SP 800-171 & CMMC 2.0 3.1.4 Requirement Explanation:
Without the separation of duties security controls can easily be bypassed. By separating duties between individuals you can reduce the risk of malevolent activity.
Example NIST SP 800-171 & CMMC 2.0 3.1.4 Implementation:
Do not allow one person to be in charge of an entire critical task. Assign parts of the critical task to different persons.
NIST SP 800-171 & CMMC 2.0 3.1.4 Scenario(s):
- Scenario 1:
Alice handles the creation of user accounts and the assignment of account privileges. Your company periodically audits user accounts and their privileges. Instead of letting Alice do this you separate duties by assigning the auditing task to another employee.
Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:
Compliance Accelerator
Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.
Quantum Assessor
Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.
Supply Chain Verifier
Trust is everything. Verify, monitor, and support subcontactor compliance.