A Network Administrator was recently promoted to Chief Security Officer at a local university. One of employee's new responsibilities is to manage the implementation of an RFID card access system to a new server room on campus. The server room will house student enrollment information that is securely backed up to an off-site location. During a meeting with an outside consultant, the Chief Security Officer explains that he is concerned that the existing security controls have not been designed properly. Currently, the Network Administrator is responsible for approving and issuing RFID card access to the server room, as well as reviewing the electronic access logs on a weekly basis. Which of the following is an issue with the situation?

Question

Quizplus · Accepted Answer

The issue is a lack of segregation of duties. The same person is responsible for both approving access and reviewing access logs, which can lead to conflicts of interest and potential security risks.

A Network Administrator Was Recently Promoted to Chief Security Officer