The operating system must implement separation of duties through assigned information system access authorizations.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32929	SRG-OS-000019-NA	SV-43327r1_rule		Medium

Description
Separation of duties is a prevalent Information Technology control implemented at different layers of the information system, including the operating system and in applications. It serves to eliminate or reduce the possibility that a single user may carry out a prohibited action. Separation of duties requires the person accountable for approving an action is not the same person who is tasked with implementing or carrying out the action. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account.

Description

Separation of duties is a prevalent Information Technology control implemented at different layers of the information system, including the operating system and in applications. It serves to eliminate or reduce the possibility that a single user may carry out a prohibited action. Separation of duties requires the person accountable for approving an action is not the same person who is tasked with implementing or carrying out the action. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account.

STIG	Date
Mobile Operating System Security Requirements Guide	2013-07-03

Details

Check Text ( C-41236r2_chk )
This requirement is NA for the Mobile OS SRG.

Fix Text (F-36846r2_fix)
The requirement is NA. No fix is required.