Designing Segregation of Duties Across Oracle ERP, SCM & EPM
Why Segregation of Duties Starts with Your Business, Not Oracle
For many organisations, Segregation of Duties (SoD) is viewed as a compliance exercise.
- A spreadsheet is produced.
- Conflicting Oracle roles are identified.
- Some access is removed.
- The audit requirement is ticked off.
The problem with this approach is that it focuses on Oracle, rather than the business processes Oracle supports.
At Sarrisco, we believe Segregation of Duties should be designed long before the first Oracle Job Role is assigned.
It should begin by asking a much simpler question:
“Which business activities should never be performed by the same individual?”
Everything else flows from that decision.