When someone requests to take an action that is potentially dangerous, what protection should be put into place?

• A. Limit the number of people that may request an approval
• B. Ensure that the approver is the same as the requestor
• C. Both A and B
• D. Neither A nor B

Answer: (A)

Limiting who can initiate an approval creates a tighter governance boundary for potentially dangerous actions. By restricting the number of people who may request an approval, you reduce the surface for mistakes or abuse: only trusted, trained individuals can start the process, making it easier to enforce policy, audit requests, and ensure proper oversight during the approval step.

Having the same person both request and approve eliminates an essential independent check. If the requester and approver are the same, there’s no separation of duties, which increases the risk of unreviewed or biased decisions slipping through.

So, the protective measure that fits this scenario is to limit the number of people who may request an approval.