Which of the following principles is used by the U.S. government in its access control models?
- Job rotation
- Separation of duties
- Need to know
- Mandatory vacations
Explanation: Employees in an organization are typically granted access to the data and information that they need to do their job. The U.S. government uses the “need to know” principle in its access control models.
Exam with this question: Cyber Threat Management - 1.4.2 Governance and Compliance Quiz
Exam with this question: Cyber Threat Management: My Knowledge Check Answers