ISO 27001 5.3 Segregation of Duties

Requirement

"Conflicting duties and conflicting areas of responsibility shall be segregated."[1]

Explanation

Without the separation of duties security controls can easily be bypassed. By separating duties between individuals you can reduce the risk of malevolent activity.

References

  1. ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…