Segregation of Duties Walkthrough
Who can raise, approve, receive, and pay in the same login—and whether the application actually stops that combination.
8–12 business days · from MYR 16,500 · informational
Starting from role catalogues and a sample of user accounts, we test whether requester, approver, goods-receipt, and payment rights can sit on one person. You receive a conflict list with named accounts, the override path if one exists, and a keep-or-split recommendation your access team can action.
What is included
- Role and permission inventory for procurement modules
- Conflict matrix for raise, approve, receive, and pay
- Named account exceptions with compensating controls noted
- Handoff sheet for access administration
