individuals requiring separation
163559·updated Aug 30, 2026A category of personnel—defined during an organization's access-control and duty-analysis process—whose assigned roles, privileges, or functions must not be held or exercised by the same person simultaneously, because doing so would create an unacceptable risk of fraud, error, or abuse of privilege. Identifying the duties of individuals requiring separation is the first step toward defining system access authorizations to support separation of duties. Separation of duties addresses the potential for abuse of authorized privileges and reduces the risk of malevolent activity without collusion. In practice, this includes dividing mission functions and support functions among different individuals or roles—for example, ensuring that personnel who administer access-control functions do not also administer audit functions. The phrase operates as a shorthand within separation-of-duties (SoD) control language for the set of role-holders whose job functions have been formally flagged as incompatible, and it drives downstream decisions about access provisioning and organizational design.
Source
Identify the duties of individuals requiring separation.the sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: compositional.
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A compositional noun phrase, not a term of art. It describes, within the context of a separation-of-duties control, the personnel whose assigned roles or functions have been identified as needing to be divided across different people — i.e., those whose combined access to authorization, execution, recording, or audit functions would create an unacceptable conflict or fraud risk. Separation of duties addresses the potential for abuse of authorized privileges and reduces the risk of malevolent activity without collusion, including dividing mission functions and support functions among different individuals or roles and ensuring that those who administer access control functions do not also administer audit functions. The phrase appears as part of an assessment objective — "the duties of individuals requiring separation to reduce the risk of malevolent activity are defined" — where it modifies "duties" and simply points to whichever personnel hold roles that, per policy, must not be held by the same person.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
Classifications
Entity Type
Sensitivity
Information Class
Variants
- plural
- individuals requiring separations
- possessive
- individuals requiring separation's
- pluralpossessive
- individuals requiring separations'
Framework definitions
- §1 · attested_usage_reviewer_confirmed
- No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.Increment 2: attested in 800-171r3 without a glossary definition.
- §1 · web_lookup_draft
- A category of personnel—defined during an organization's access-control and duty-analysis process—whose assigned roles, privileges, or functions must not be held or exercised by the same person simultaneously, because doing so would create an unacceptable risk of fraud, error, or abuse of privilege. Identifying the duties of individuals requiring separation is the first step toward defining system access authorizations to support separation of duties. Separation of duties addresses the potential for abuse of authorized privileges and reduces the risk of malevolent activity without collusion. In practice, this includes dividing mission functions and support functions among different individuals or roles—for example, ensuring that personnel who administer access-control functions do not also administer audit functions. The phrase operates as a shorthand within separation-of-duties (SoD) control language for the set of role-holders whose job functions have been formally flagged as incompatible, and it drives downstream decisions about access provisioning and organizational design.DR-088 backfill from the noun definition column
- §1 · web_lookup_draft
- A compositional noun phrase, not a term of art. It describes, within the context of a separation-of-duties control, the personnel whose assigned roles or functions have been identified as needing to be divided across different people — i.e., those whose combined access to authorization, execution, recording, or audit functions would create an unacceptable conflict or fraud risk. Separation of duties addresses the potential for abuse of authorized privileges and reduces the risk of malevolent activity without collusion, including dividing mission functions and support functions among different individuals or roles and ensuring that those who administer access control functions do not also administer audit functions. The phrase appears as part of an assessment objective — "the duties of individuals requiring separation to reduce the risk of malevolent activity are defined" — where it modifies "duties" and simply points to whichever personnel hold roles that, per policy, must not be held by the same person.Drafted by the propose-term web lookup (PD-018); a curator confirms or replaces it.