Exam CISM topic 1 question 405 discussion

A. job duties.

A. job duties. The principle of least privilege is a security concept that dictates that individuals or systems should be granted the minimum level of access or permissions necessary to perform their job duties or functions. Therefore, to implement this principle, it is crucial to first identify and understand the job duties and roles within an organization. Once you have a clear understanding of these job duties, you can then determine the appropriate level of access and permissions required for each role, ensuring that individuals have access only to the resources and data necessary for their specific job responsibilities.

The principle of LEAST privileged is based on job duties… data owners contribute assigning or changing permissions on job duties basis

Data owner determines who have access to respective data regardless of job duties

D. Data owners. they will then decide the access controls levels

A. job duties.