Which of the following best describes split knowledge and dual control?
A.
They are both types of rotation of duties controls. Split knowledge means that more than one person knows the information necessary to complete a task. Dual control means that more than one person must participate in the task.
B.
They are both types of separation of duties controls. Split knowledge means that more than one person knows the information necessary to complete a task. Dual control means that more than one person must participate in the task.
C.
They are both types of separation of duties control. Dual control means that more than one person knows the information necessary to complete a task. Split knowledge means that more than one person must participate in the task.
D.
They are both types of logical controls. Split knowledge means that more than one person knows the information necessary to complete a task. Dual control means that more than one person must participate in the task.
Explanation:
They are both types of separation of duties controls. Split
knowledge means that more than one person knows the information necessary to
complete a task. Dual control means that more than one person must participate in
the task.
The wording in these answers are painful. Split knowledge means not one person has full knowledge to complete the task. The working in the answer is ambiguous. However one has to focus on that first they are separation of duties, and then take the best answer from there.
Dual Control – Dual control means that at least two or more people control a single process. In encryption key management, this means at least two people should be needed to authenticate the access of an encryption key, so that no one single person has access to an encryption key
Split Knowledge – Split knowledge prevents any one person from knowing the complete value of an encryption key or passcode. Two or more people should know parts of the value, and all must be present to create or re-create the encryption key or passcode. While split knowledge is not needed to create data encryption keys on the IBM i, it is needed for the generation of master keys which are needed to protect data encryption keys. Any encryption keys that are accessed or handled in the clear in any way should be protected using split knowledge.