Guest user Created: Dec 22, 2016 Last commented: Dec 22, 2016

Segregation of duties

I have an issue with A.6.1.2 clausule. My company is small, do you have some information or example ?

0 0

Assign topic to the user

Select user

Rhand Leal Dec 22, 2016

Answer: If the number of persons in your organization does not allow you to split responsibilities and duties, you should consider the implementation of other controls that work as deterrent to bad behaviour or allow you to detect such situations. As examples I can list video cameras, management supervision, job rotation and systems logs.

This article will provide you further explanation about segregation of duties:
- Segregation of duties in your ISMS according to ISO 27001 A.6.1.2 https://advisera.com/27001academy/blog/2016/11/21/segregation-of-duties-in-your-isms-according-to-iso-27001-a-6-1-2/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Dec 22, 2016

Expert Advice Community