Segregation of Duties (SoD)

Ensuring no single user can complete a sensitive process unilaterally — for example, both creating and approving a vendor payment. SoD policies are encoded into IGA tools and tested during access certification.