Which security mitigation technique involves rotating personnel roles every few months?

Which security mitigation technique involves rotating personnel roles every few months?

• A. Separation of Duties
• B. Mandatory Vacations
• C. Job Rotation
• D. Least Privilege

Answer: (C)

Rotating personnel roles through different duties is a defense that keeps critical processes under fresh scrutiny by changing who performs each task on a regular schedule. By moving staff between roles every few months, you reduce the chance that a single person can silently manipulate a process, and you gain cross-training and broader visibility into how tasks are actually carried out. This approach gives you ongoing detection of irregularities as others review or take over responsibilities, rather than relying on a single individual to maintain control. It’s distinct from separation of duties, which intentionally splits tasks so one person cannot complete an entire process; mandatory vacations, which require time off to surface unusual activity, and least privilege, which limits access rights rather than rotations.

Rotating personnel roles through different duties is a defense that keeps critical processes under fresh scrutiny by changing who performs each task on a regular schedule. By moving staff between roles every few months, you reduce the chance that a single person can silently manipulate a process, and you gain cross-training and broader visibility into how tasks are actually carried out. This approach gives you ongoing detection of irregularities as others review or take over responsibilities, rather than relying on a single individual to maintain control. It’s distinct from separation of duties, which intentionally splits tasks so one person cannot complete an entire process; mandatory vacations, which require time off to surface unusual activity, and least privilege, which limits access rights rather than rotations.