Separation of Duties
What is Separation of Duties?
Separation of duties is the security and governance principle of dividing sensitive tasks among multiple people or roles so no single individual has unchecked control over an entire critical process.
Examples
- One employee creates a vendor payment, while another employee approves it before funds are released.
- A developer can write code, but a separate reviewer or release manager must approve the production deployment.
Discover 🔎
Some actions become dangerous when one person can perform every step alone. If the same individual can request a payment, approve it, send it, and hide the evidence, the opportunity for fraud or abuse becomes much greater. The same pattern appears in technology, finance, administration, and security operations.
Separation of duties exists to break that concentration of power. By dividing responsibility across more than one person or role, the organization creates friction against misuse and increases the chance that errors or fraud will be noticed before serious damage is done.
Summary 📝
Separation of duties protects critical processes by ensuring that no single person has unchecked control over every important step. It reduces the chance of fraud, concealment, and serious error by distributing responsibility and adding independent review. In well-designed environments, it improves both prevention and accountability.
Tip: The interactive version includes progress tracking, decks, and premium deep dives.