5.3 Segregation of Duties

Conflicting duties and conflicting areas of responsibility should be segregated.

Segregation of duties is important in information security because this helps to reduce the risk of unauthorised access or misuse of sensitive information.

An organisation may require different individuals or groups to be responsible for different aspects of the security process, such as setting up user accounts, granting access to resources, and monitoring activity logs. Separating these responsibilities makes it more difficult for a single individual to compromise the system's security.Segregation of duties is an important principle in information security that helps to reduce the risk of errors and fraud and to ensure the integrity and security of an organisation's information assets.