ISC2 CISSP Certified Information Systems Security Professional Official Study Guide

by Mike Chapple

Separation of duties is the security concept in which critical, significant, and sensitive work tasks are divided among several individual administrators or high-level operators (Figure 2.1).

Collusion is the occurrence of negative activity undertaken by two or more people, often for the purposes of fraud, theft, or espionage.

Job responsibilities are the specific work tasks an employee is required to perform on a regular basis.

The principle of least privilege states that in a secured environment, users should be granted the minimum amount of access necessary for them to complete their required work tasks or job responsibilities.

Onboarding is the process of adding new employees to the identity and access management (IAM) system of an organization.

Offboarding is the reverse of this process. It is the removal of an employee’s identity from the IAM system once that person has left the organization.