A Network Administrator was recently promoted to Chief Security Officer at a local university. One of
employee’s new responsibilities is to manage the implementation of an RFID card access system to a new
server room on campus. The server room will house student enrollment information that is securely backed up
to an off-site location.
During a meeting with an outside consultant, the Chief Security Officer explains that he is concerned that the
existing security controls have not been designed properly. Currently, the Network Administrator is responsible
for approving and issuing RFID card access to the server room, as well as reviewing the electronic access logs
on a weekly basis.
Which of the following is an issue with the situation?
A.
Segregation of duties
B.
Undue influence
C.
Lack of experience
D.
Inadequate disaster recovery plan