Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

Which principle is exemplified by having only one manager able to get company checks while another can sign them?

1. Separation of duties

2. Auditability

3. Least privilege

4. Defense in depth

The correct answer is: Separation of duties

The principle exemplified by having one manager responsible for obtaining company checks while another manager has the authority to sign them is known as separation of duties. This principle is crucial in establishing a system of checks and balances within an organization to reduce the risk of fraud and errors. By dividing responsibilities between different individuals, the organization ensures that no single person has complete control over any critical process. In this scenario, the person who can request the checks is distinct from the one who can approve their disbursement, which greatly diminishes the incentive and opportunity for fraudulent activity. If one individual were responsible for both acquiring and signing checks, they could potentially manipulate the process for personal gain. Separation of duties not only enhances security but also creates a culture of accountability, as it requires collaboration and verification between personnel. In the context of cybersecurity and financial integrity, this principle is key to protecting assets and ensuring that operational processes are not compromised.