Ann the security administrator has been reviewing logs and has found several overnight sales personnel
are accessing the finance department’s network shares. Which of the following security controls should
be implemented to BEST remediate this?
A.
Mandatory access
B.
Separation of duties
C.
Time of day restrictions
D.
Role based access
The overnight SALES personnel are supposed to work overnight. They are not supposed to access the FINANCE department data. I would think that D. Role based access would be the answer.
I agree. Why they should have access at the first place?!!!!