Which of the following is categorized under the organizational controls of ISO/IEC 27001?

Annex A 5.3 Segregation of duties is classified as an organizational control. Organizational controls include policies, procedures, and structures established to support information security. Segregation of duties aims to reduce opportunities for unauthorized or unintentional modification or misuse of the organization’s assets by dividing tasks and associated privileges.

“Annex A.5 contains organizational controls, including A.5.3 Segregation of duties, which ensures that no single person is responsible for completing a critical task alone, thereby reducing the risk of fraud or error.”

— ISO/IEC 27001:2022, Annex A; ISO/IEC 27002:2022, 5.3