Discuss PECB ISO-IEC-27001-Lead-Implementer Exam Topic 6 Question 25

What is the most important reason for applying the segregation of duties?

ASegregation of duties makes it clear who is responsible for what.

BSegregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.

CTasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

DSegregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.

Suggested Answer: C

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Moon 11 months ago

Wow, I didn't realize segregation could help with fraud investigations!

Celestina 11 months ago

D is nice, but isn't the main point to prevent misuse?

Lezlie 12 months ago

B sounds a bit off, can you really investigate fraud like that?

Cherelle 12 months ago

I think C is the most important reason, it really protects assets.

Dorathy 12 months ago

A is definitely true, clear roles help a lot.

Alisha 1 year ago

I’m a bit confused about D; it seems more about convenience than the core purpose of segregation of duties.

Marya 1 year ago

I’m leaning towards option C because it covers both unauthorized and unintentional changes, which seems really important for safeguarding assets.

Lovetta 1 year ago

I remember a practice question that emphasized responsibility clarity, but I feel like preventing misuse of assets is more critical in real scenarios.

Noel 1 year ago

I think the main reason for segregation of duties is to minimize fraud opportunities, but I'm not entirely sure if that's the most important aspect.

Maybelle 1 year ago

Hmm, I'm a bit unsure about this one. Cryptocurrency transactions can be tricky to trace, but I'll have to think through the details carefully.

Daren 1 year ago

Okay, I'm pretty confident I know the answer to this. Alibaba Cloud WAF definitely has features like Blocked Regions, HTTP ACL Policy, and Crawler Detection, so the one that's not a feature must be Data Leakage Prevention.

Ines 1 year ago

A global form could work, but I'm not convinced that's the most efficient solution. Let me re-read the question and consider the other options.

PECB ISO-IEC-27001-Lead-Implementer Exam - Topic 6 Question 25 Discussion