The company is about to upgrade a financial system through a third party, but wants to legally ensure that no sensitive information is compromised throughout the project. The project manager must also make sure that internal controls are set to mitigate the potential damage that one individual’s actions may cause.
Which of the following needs to be put in place to make certain both organizational requirements are met? (Select TWO).
A . Separation of duties
B . Forensic tasks
C . MOU
D . OLA
E . NDA
F . Job rotation
Answer: A,E