SAILPOINT-CERTIFIED-IDENTITYNOW-ENGINEER · Question #102
Is the following statement accurate regarding Separation of Duties (SoD)? Solution: An SoD policy must define control matrix.
The correct answer is B. No. No, an SoD (Separation of Duties) policy does not require a control matrix to be defined. While a control matrix can be a useful tool for organizations to visualize and enforce SoD policies by mapping roles to potential conflicting access rights, it is not a mandatory component…
Question
Is the following statement accurate regarding Separation of Duties (SoD)? Solution: An SoD policy must define control matrix.
Options
- AYes
- BNo
How the community answered
(59 responses)- A25% (15)
- B75% (44)
Explanation
No, an SoD (Separation of Duties) policy does not require a control matrix to be defined. While a control matrix can be a useful tool for organizations to visualize and enforce SoD policies by mapping roles to potential conflicting access rights, it is not a mandatory component of an SoD policy. An SoD policy primarily focuses on preventing conflicts of interest by ensuring that no individual has access to perform conflicting tasks within a business process (e.g., approving and processing payments). The control matrix is a recommended method for managing SoD but not a Key Reference from SailPoint Documentation: SoD Policy Overview: SailPoint recommends structuring SoD policies to focus on preventing conflicting access but does not mandate the use of a control matrix, which is an optional best practice for visualizing these controls.
Topics
Community Discussion
No community discussion yet for this question.