Dual control is a process where two or more separate entities operate in concert to protect sensitive materials. Which statement best describes its principle?

• A. A single person holds all keys
• B. Two or more separate entities operating in concert to protect sensitive materials, with no single person allowed to access
• C. A single key used in two locations
• D. A policy that prohibits collaboration

Answer: (B)

Dual control centers on requiring collaboration of two or more distinct individuals to handle truly sensitive materials. The principle is that no single person should be able to access or control the material on their own. By having two people, you create checks and balances and reduce the risk of theft, fraud, or error. The described statement captures this: two or more separate entities operating in concert to protect sensitive materials, with no single person allowed to access. An example is two people holding different keys or two people present to unlock a vault or decrypt data; both must participate to proceed. The other options fail because one person holding all keys eliminates the necessary collaboration; using a single key in two locations focuses on distribution rather than mutual authorization; and a policy that forbids collaboration is directly against the idea of dual control.