Key Terms 7

Question 1

Individual responsible for the protection and classification of a specific data set.

Answer 1

Data owner

Question 2

Individual responsible for implementing and maintaining security controls to meet security requirements outlined by data owner.

Answer 2

Data custodian

Question 3

Preventive administrative control used to ensure one person cannot carry out a critical task alone.

Answer 3

Separation of duties

Question 4

Two or more people working together to carry out fraudulent activities.

Answer 4

Collusion

Question 5

Detective administrative control used to uncover potential fraudulent activities.

Answer 5

Rotation of duties

Question 6

Detective administrative control used to uncover potential fraudulent activities by requiring a person to be away from the organization for a period of time.

Answer 6

Mandatory vacation