CISM Certification Domain 1: Information Security Governance Video Boot Camp 2019 - Administrative personnel controls

The video tutorial discusses various administrative controls used in IT security, including least privilege, separation of duties, job rotation, and mandatory vacations. It emphasizes the importance of these controls in preventing fraud and errors. The tutorial also covers the use of NDAs and background checks for new employees, highlighting the need for multiple, overlapping security measures to ensure a secure environment.

What is the primary goal of implementing least privilege in an organization?

• To restrict all access to sensitive data

• To ensure employees have only the access necessary for their job

• To allow employees to access data whenever they want

• To give employees access to all company data

In the context of IT security, what does the need-to-know principle entail?

• Restricting access to management only

• Allowing access based on employee rank

• Providing access only when there is a justified need

• Granting access to all employees

How does separation of duties help in preventing fraud?

• By allowing one person to handle all tasks

• By increasing the workload of employees

• By restricting access to financial data

• By dividing responsibilities among multiple people

What is a key benefit of job rotation in an organization?

• It helps detect errors and fraud

• It increases employee workload

• It limits employee interaction

• It reduces the need for training

Why are mandatory vacations used as a security measure?

• To give employees a break

• To prevent and detect fraud

• To reduce company expenses

• To increase employee satisfaction

What is the purpose of having employees sign an NDA?

• To increase their salary

• To allow them to share company secrets

• To prevent them from leaving the company

• To legally bind them from disclosing confidential information

Why are background checks important for new employees?

• To verify their identity

• To ensure they have the necessary skills

• To check for any red flags in their history

• To determine their salary