A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls, commonly called resource controls.

Question

Quizplus · Accepted Answer

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls, commonly called compensating controls, not resource controls. Compensating controls are designed to mitigate the risk when segregation of duties cannot be fully achieved.

A Small Organization That Does Not Have Enough Personnel to Adequately