Free CMMC-CCA Web TestEngine Demo

Q22 Single choice

You are assessing a contractor that develops software for air traffic control systems. In reviewing their documentation, you find that a single engineer is responsible for designing new ATC system features, coding the software updates, testing the changes on the development network, and deploying the updates to the production ATC system for customer delivery.

How will proper separation of duties help the contractor meet the intent of AC.L2-3.1.4 - Separation of Duties?

A
It allows the engineers to specialize in specific areas
B
It reduces concentrated privileges and power and improves checks & balances. Errors and malicious actions are more likely to be caught. Risk is reduced without relying solely on one individual
C
It reduces the overall cost of software development
D
It simplifies the development process

CMMC-CCA Web TestEngine demo