home/glossary/duties of individuals requiring separation

duties of individuals requiring separation

nounid 163560·updated Aug 30, 2026
verified

This is a compositional phrase, not a term of art. In NIST SP 800-53 AC-5, it appears inside an organization-defined assignment parameter: "Identify and document [Assignment: organization-defined duties of individuals requiring separation]." The phrase simply names the object of that assignment — the set of role-based responsibilities an organization must enumerate before it can enforce separation of duties — and its meaning is fully assembled from its ordinary parts. The two-step operational expectation is to "identify the duties of individuals requiring separation" and then "define system access authorizations to support separation of duties," making plain that the phrase is a procedural instruction, not a coined concept.

MWE

Source

document
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
found in
proposed during MWE review
element
e0185
proposed by
dorianc@moxywolf.com
discovery
ManualCuration
Identify the duties ofthe sentence this term was read in
Where the definition came fromawaiting curator confirmation

generalized from a web lookup of the quoted expression at proposal time Verdict: compositional.

A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.

A web lookup ran when this term was proposed

This is a compositional noun phrase, not a term of art. It names the organization-assigned set of job functions or roles that an organization has determined must not be held or exercised by the same individual — the input that AC-5 requires an organization to identify and document. In NIST SP 800-53 Rev. 5, control AC-5 directs organizations to "identify and document [Assignment: organization-defined duties of individuals requiring separation]" and then define system access authorizations to enforce that separation. The phrase is a parameter placeholder — the bracketed "Assignment:" syntax signals that each organization substitutes its own concrete list of role conflicts — rather than a defined concept with a fixed meaning independent of that substitution. The underlying principle it serves is that separation of duties addresses the potential for abuse of authorized privileges and reduces the risk of malevolent activity without collusion, achieved by dividing mission or business functions and support functions among different individuals or roles.

Advisory only. A term this product ships is defined by an authority document, not by a search result.

Proposed during multiword review of this document in the CKI mapping queue.

Attested in

NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems1 citation · 1 confirmed by a reviewer · observed 2026-09-01 under anchor/0.9/36451/2026-09-01
03.01.04.a

Classifications

Entity Type

Requirement85%llm-generatedllm:claude-haiku-4-5

Sensitivity

Regulated90%llm-generatedllm:claude-haiku-4-5

Information Class

unclassified

Variants

plural
duties of individuals requiring separations
possessive
duties of individuals requiring separation's
pluralpossessive
duties of individuals requiring separations'

Framework definitions

NIST SP 800-171r31 senseview framework →
§1 · attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
Increment 2: attested in 800-171r3 without a glossary definition.
Legacy lexicon import1 senseview framework →
§1 · web_lookup_draft
This is a compositional phrase, not a term of art. In NIST SP 800-53 AC-5, it appears inside an organization-defined assignment parameter: "Identify and document [Assignment: organization-defined duties of individuals requiring separation]." The phrase simply names the object of that assignment — the set of role-based responsibilities an organization must enumerate before it can enforce separation of duties — and its meaning is fully assembled from its ordinary parts. The two-step operational expectation is to "identify the duties of individuals requiring separation" and then "define system access authorizations to support separation of duties," making plain that the phrase is a procedural instruction, not a coined concept.
DR-088 backfill from the noun definition column

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.