ServiceNow Certified Implementation Specialist – Security Incident Response — Question 95

Why is it important that the Platform (System) Administrator and the Security Incident administrator role be separated? (Choose three.)

Answer options

• A. Access to security incident data may need to be restricted
• B. Allow SIR Teams to control assignment of security roles
• C. Clear separation of duty
• D. Reduce the number of incidents assigned to the Platform Admin
• E. Preserve the security image in the company

Correct answer: A, B, C

Explanation

The separation of these roles is essential to prevent conflicts of interest and ensure that security incidents are handled independently. By restricting access to security incident data (A), empowering SIR Teams to manage security roles (B), and maintaining a clear separation of duties (C), organizations can enhance their security posture. The other options, while relevant to operational efficiency, do not address the core reason for role separation.