An administrator is reviewing a recent security audit and determines that two users in finance also have access to the human resource data. One of those users fills in for any HR employees on vacation, the other user only works in finance. Which of the following policies is being violated by the finance user according to the audit results?

The CASP+ certification is suited to professionals who want to be immersed in technology as a practitioner, while the CISSP is suited for those who want to be in management or move into management. The CISSP focuses on management strategies, practices and principles.