CCI-001380

Implementation Guidance

The organization being inspected/assessed documents separation of duties of individuals.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented separation of duties to ensure the organization being inspected/assessed documents separation of duties of individuals.

Compelling Evidence

1.) Signed and dated access control policy 2.) Job description documentation 3.) Signed and dated documentation that define the separation of duties of individuals