フリー問題

問題文

A control requires that privileged access requests be approved by a second person. Records show that in a third of cases the same person raised and approved the request. The control exists and is documented. What has been measured?

選択肢

1. The sampling result reports flowdown requirement obligations before any mandatory specification.
2. The sampling result reports efficacy testing requirements before any mandatory specification.
3. The sampling result reports transfer arrangement rules before any mandatory specification.
4. The sampling result reports escalation proposal controls before any mandatory specification.