Segregation Of Duties SoD

• Understanding of Organizational Roles and Responsibility Matrix alongwith Job responsibilities.
• Understanding of the User Access Review (UAR) mechanism in place at the organization, including follow up activities post review.
• Understanding the application / tool used for User Access Review.
• Understanding of the access provided to the in-scope application.
• Identifying the gaps vis-à-vis roles and responsibilities.
• Advising the client for the gaps identified and providing solutions.
• Identifying mitigating controls where the identified gaps cannot be addressed.