Only that employee whose job function depends on knowing the information is provided access. This is called ____.
A) Due care
B) Separation of duties
C) Risk assessment
D) Need to know

Question

Quizplus · Accepted Answer

Need to know is the principle of providing access to information only to those employees whose job functions require knowledge of that information. This helps to limit the risk of unauthorized access and protect sensitive information. Due care refers to the level of care and attention that a reasonable and prudent person would take in a given situation to prevent harm or loss. Separation of duties refers to the practice of dividing key tasks and responsibilities among different employees to prevent fraud, errors, and other risks. Risk assessment is the process of identifying, evaluating, and mitigating risks to an organization's assets, operations, and reputation. While all of these concepts are important in information security, the principle of need to know is the most relevant to the question.

Only That Employee Whose Job Function Depends on Knowing the Information