Separation of duties

Fundamental security requirement for fraud and error prevention.

• Dissemination of tasks and associated privileges for a specific business process among multiple subjects.

• Often implemented with RBAC.

Damage control.

• Segregation of duties helps reduce the potential damage from the actions of one person.

• Some duties should not be combined into one position.