Segregation of Duties
You can ensure that the same person cannot perform two tasks in MIC when one of the tasks consists of reviewing the other task. For example, it would not be practical for the same person to be responsible for assessing a control as well as for validating that assessment later on. In the case of such tasks, you can enforce the segregation of duties in the system.
In Customizing under Segregation of Duties ® Create Conflict Groups for Segregation of Duties, you have entered in one or more conflict groups those tasks that may not be performed by the same person for an object.
After the assignment of roles to persons or the assignment of texts, you can check that nobody actually has authorization for more than one task occurring in the same conflict group. You can perform a check on the segregation of duties in the following places:
· In Customizing under Segregation of Duties ® Check Segregation of Duties
· In the following Web applications by choosing the Check Segregation of Duties pushbutton:
¡ Documentation of Controls (only for the documentation of the organizational unit)
¡ Tester Assignment
If conflicts arise, they are entered in a log in Customizing as well as in the Web applications. You can then use this log to change any incorrect assignments.