Security+ ยท 5.0 Program Management
Separation of duties
No single person should have enough authority to execute a sensitive process end-to-end. Example: one person writes the deploy script, a different person approves the deploy.
How this shows up at NCAE
Your team of 3-10 naturally implements this: one person on SSH, one on SMB, one on DNS. No single teammate has the keys to destroy every service.