Nearly all companies assessed their strategies for segregating duties to improve internal controls as part of their Sarbanes-Oxley compliance effort that started a decade ago. Many haven’t updated them since.
Changes to job descriptions, organizational structure, and technology can quickly render segregation-of-duties (SoD) policies outdated, yet many companies fail to periodically reassess them.
