To prepare for this document, select an institution (e.g., financial, educationa

Question

To prepare for this document, select an institution (e.g., financial, educational, or government) whose IT department implements an SoD policy.

Respond in 350–500 words and identify 2–3 roles within the institution’s IT department you selected. Choose one role and provide 2–3 key questions that you might ask to determine if SoD is necessary for that role. Then, explain why it is critical that their duties be separated. Be sure to address any roles where it is impossible to apply SoD. Finally, address the ethical implications of separating or failing to separate duties.

Explanation / Answer

Separation of Duties :

It is a key componnent for internal controls. Separation of duties helpful in distributing the duties among different people with specif privileges for security reasons. Even though is new term of IT industry, yet its needs are in demand.

Basically the companies of all sizes are looking into the fact no two department should should mingle, the operations should not conflicts to avoid any stalling. Consider a financial Institution, where it has different departments like, receiving cheques, cash handling, loan department, cards department. No any department should have to interfere in the task of othere department.

Seperation of Duties has the following advantages :

1. Prevention of Conflicts of interests

2. Prevent wrong acts, frauds, abuse and error

3. It restricts the load of power hold by any individual.

For example, consider the role of Cashier in the financial institution, below are points that are to show SoD is necessary for that role.

1. What if the cashier has privilege to credits department too?

2. What if the cashier has privelege to approve loan?

This kind of situtions will put the institution into major threat, that should be avoided cost, there comes the need for SoD.

Ethics of Seperation of Duties:

~ The person who designs SoD will be the person to test the security.

~ The person responsible for the information security, will not report directly to chief officer.

Related Questions

Navigate

• Browse (All)
• Browse T
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.