Segregation of Duties (Preventive Control)
No single individual should execute conflicting financial actions.
- Cross-application SoD rules evaluated before approval and provisioning
- Risk simulation at request time prevents violations from entering production
- Mitigations are documented when exceptions are required
