7-46.1 Security Operations

Question 1

Audit report often used when conducting a due diligence investigation of a technology service provider

Answer 1

SSAE 18 SOC 2 Type 2 Report

Question 2

This action minimizes monopoly of duties and lessens dependance on a single individual

Answer 2

Job rotation

Question 3

Principle that requires demonstrated reason for access

Answer 3

Need-to-know

Question 4

Breaking down a task so no single individual can execute a decision alone

Answer 4

Segregation of duties

Question 5

Agreement that codifies performance expectations

Answer 5

SLA