Which type of SoD policies can confirm the detection of issues?

• A. Preventive policies
• B. Reactive policies
• C. Detective policies
• D. General policies

Answer: (C)

Detective policies are designed specifically to identify and confirm issues related to Segregation of Duties (SoD) violations after they have occurred. These policies focus on monitoring activities within a system to detect potential conflicts or anomalies that may arise, ensuring that any breaches of policy can be identified and addressed.

The primary function of detective policies lies in their ability to provide insights and raise alerts on specific transactions or permission changes that may violate SoD principles. This real-time or periodic monitoring helps organizations maintain compliance and manage risk effectively, as it allows them to react to and investigate potential violations.

In contrast, preventive policies aim to stop issues before they occur by restricting access or setting up controls, while reactive policies come into play after a violation has occurred, focusing on remedying and responding to the incident. General policies may not specifically cater to detecting issues, as they might encompass broader rules or guidelines without the focus on monitoring or detection of SoD issues. Thus, the role of detective policies is crucial in the ongoing management and oversight of identity security practices.