CompTIA® Security+™: Study Guide, Fifth Edition

Managing Personnel

Personnel management is a security concept that focuses on minimizing the vulnerabilities, threats, and risks that people themselves bring to an organization. Ultimately, people are the last line of defense for your company’s assets. There are many mechanisms imposed to help improve personnel security, such as separation of duties, the principle of least privilege, acceptable use policies, job reviews, mandatory vacations, and even exit interviews.

You need to be aware of these controls and learn how to do your job within the boundaries that they dictate. Here are some important recommendations for management:

• Know exactly which privileges you are assigned.
• Don’t attempt to exceed your assigned authority.
• Know which actions ...