Shared Responsibility
2 slides · 1 min read · Domain 3
Shared Responsibility
Each shared design responsibility aspect represents the potential for the compromise of an information system.
The access to design components must be considered with great care to be sure it does not compromise security.
Security controls such as logging should be put in place to ensure users are being audited.
For example, if given the choice of implementing a new function as "everyone" group users or "domain" group users, choose the latter. Then, test it in the non-production environment and ensure it does not break the system before moving to production.