SoD

Segregation of Duties (SoD) prevents toxic combinations of permissions — for example, the same person creating and approving a payment — that enable fraud or error.