ISM-0107

History

2008
Agencies should not assign ICT security audit responsibilities to staff members with system administrator privileges.