Many companies still find implementing SoD difficult and tedious. Some companies claim that SoD is only for auditors, while others understand the importance of enforcing rules for user authorizations. Very few have taken it to the next level and expanded it to other areas to create business continuity across their ERP and business application ecosystem. Most will hire outside consultants to execute this project, but these consultants are not familiar with the company's operations.
So, what is the best way to implement segregation of duties? Unfortunately, there is no universal "ruleset" that companies can adopt, but there are a few best practices that can make the journey more efficient and ensure a higher degree of success. Here are nine best practices we collected from our customers that will help prepare and guide you toward a successful SoD implementation project.