Question

Match each item to the insider threat control measure to which it applies. Control measures may have more than one match.

A$.$ Employee access to systems and applications is reduced

B Access to data is restricted based on the minimum required to complete a task

C Tasks involving high$-$value or high$-$risk information require at least two people to perform them

D Risk of malicious behavior by a single individual is reduced by requiring the involvement of two or more employees

Separation of duties

Least privilege