NCAE Mapping Hub
Security+ ยท 5.0 Program Management

Separation of duties

No single person should have enough authority to execute a sensitive process end-to-end. Example: one person writes the deploy script, a different person approves the deploy.

How this shows up at NCAE

Your team of 3-10 naturally implements this: one person on SSH, one on SMB, one on DNS. No single teammate has the keys to destroy every service.