{"id":2697,"date":"2016-08-17T22:42:37","date_gmt":"2016-08-17T22:42:37","guid":{"rendered":"https:\/\/www.peeriosity.com\/shared-services\/articles\/?p=2697"},"modified":"2022-07-28T18:34:43","modified_gmt":"2022-07-28T18:34:43","slug":"monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services","status":"publish","type":"post","link":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/","title":{"rendered":"Monitoring Segregation of Duties and Sensitive System Access in Shared Services"},"content":{"rendered":"

Ensuring the proper segregation of duties for different roles within a company, as well as the proper assignment and monitoring of sensitive system access by employees, are both important controls that all Shared Services operations are involved into one degree or another.\u00a0 As the scope of Shared Services expands at many companies, the adequate focus needs to be placed on ensuring that these two control areas are carefully included in any transition planning and as part of the ongoing process performance so that no compromises occur.<\/span><\/p>\n

Recently, a major manufacturing company was working to onboard a new system for tracking the segregation of duties (SOD)<\/a> and sensitive system access (SA).\u00a0 In conjunction with the new system, they were also developing a leadership scorecard summarizing their status, action plans, etc. related to this effort.\u00a0 Using Peeriosity\u2019s iPollingTM<\/sup> capabilities, this company was able to get the status and perspective of other large corporations related to both segregation of duties and sensitive system access.<\/span><\/p>\n

Reviewing the results of the first of two poll questions, the members of Peeriosity\u2019s Shared Services Leadership research area<\/a> were first asked how their companies identified segregation of duty and sensitive system access issues for their employees.\u00a0 For the majority of the companies (71%), the utilization of a formal tracking process and\/or system for all major process areas were implemented.\u00a0 That was followed in popularity by 18% of the companies indicating that a formal tracking process and\/or system is being utilized for this purpose, but for just a limited number of process areas.\u00a0 Just 6% of the responding companies said that the segregation of duties is not tracked by their company.\u00a0<\/span><\/p>\n

\"best<\/p>\n

The second poll question then addressed the role of Shared Services in the oversight and resolution of segregation of duty and sensitive system access issues.\u00a0 While no one approach stood out as dominant, for 40% of the surveyed companies their only responsibility currently in this area is to manage the compliance of Shared Services employees.\u00a0 Another 27% have no responsibility for managing compliance<\/a>, with it all being handled outside the Shared Services organization.\u00a0 However, the remaining 33% do have responsibilities in this area, with 20% managing compliance for all company employees for all process areas and 13% managing compliance for all company employees, but just for specific process areas.<\/span><\/p>\n

\"response<\/p>\n

These poll results highlight that there is an opportunity for Shared Services to expand its scope of responsibility to manage compliance in the segregation of duty and sensitive system access areas.\u00a0 With its rich history of process standardization and technical competence, this might be a perfect fit for the Shared Services environment.<\/span><\/p>\n

Some of the comments made by Peeriosity members regarding this poll include:<\/span><\/p>\n

Healthcare, Pharmaceuticals, Biotech Member: <\/strong>Organization is going through a complete role re-design initiative to resolve the root cause of SOD issues. A review of SOD \/ SA issues is coordinated currently by a third-party (PWC). Responsibility for the review and authorization of those issues rests with the designated system (or process) owners<\/a> for those respective areas.<\/span><\/p>\n

Media & Entertainment Member:<\/strong> Shared Services has developed a database for the business units to review access within the ERP system. Each unit is responsible for signing off on its own SOD Reviews. We do it twice a year.<\/span><\/p>\n

Manufacturing Member:<\/strong> \u00a0This is a joint control point. Shared Services is responsible for managing the SOD and SA compliance for employees who work in Shared Services and BU is responsible for managing the SOD and SA for employees who work in the BU department.<\/span><\/p>\n

Manufacturing Member: <\/strong>Shared Services team members participate on a Corporate GRC Committee which owns the overall process. Much of the routine steps to review newly requested SODs, along with the assignment of acceptable mitigating controls, are performed by Shared Services.<\/span><\/p>\n

How does your company manage compliance in the segregation of duty and sensitive system access areas?\u00a0 Is there an opportunity for Shared Services to expand its reach more broadly within this important role?<\/span><\/p>\n

Who are your<\/em> peers and how are you collaborating with them?<\/span><\/p>\n

_____________________________________________________________________<\/p>\n

\u201ciPollingTM<\/sup>\u201d is available exclusively to Peeriosity member company employees, with consultants or vendors prohibited from participating or accessing content. Members have full visibility of all respondents and their comments. Using Peeriosity\u2019s integrated email system, Peer MailTM<\/sup>, members can easily communicate at any time with others who participated in iPolling.<\/span><\/p>\n

\n

Peeriosity members are invited to log into www.peeriosity.com<\/a> to join the discussion and connect with Peers.\u00a0\u00a0 Membership is for practitioners only, with no consultants or vendors permitted.\u00a0 To learn more about Peeriosity, click here<\/a>.<\/span><\/p>\n<\/div>\n

 <\/p>\n

<\/span><\/span><\/span><\/p>","protected":false},"excerpt":{"rendered":"

Ensuring the proper segregation of duties for different roles within a company, as well as the proper assignment and monitoring of sensitive system access by employees, are both important controls that all Shared Services operations are involved into one degree or another.\u00a0 As the scope of Shared Services expands at many companies, the adequate focus […]<\/p>\n

<\/span><\/span><\/span><\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[8],"tags":[],"acf":[],"yoast_head":"\nSegregation of Duties and Sensitive System Access | Peeriosity, LLC<\/title>\n<meta name=\"description\" content=\"As Shared Services expands at many companies, adequate focus needs to be placed on segregation of duties and sensitive system access\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Monitoring Segregation of Duties and Sensitive System Access in Shared Services\" \/>\n<meta property=\"og:description\" content=\"As Shared Services expands at many companies, adequate focus needs to be placed on segregation of duties and sensitive system access\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/\" \/>\n<meta property=\"og:site_name\" content=\"Peeriosity\" \/>\n<meta property=\"article:published_time\" content=\"2016-08-17T22:42:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-28T18:34:43+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/\",\"url\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/\",\"name\":\"Segregation of Duties and Sensitive System Access | Peeriosity, LLC\",\"isPartOf\":{\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#website\"},\"datePublished\":\"2016-08-17T22:42:37+00:00\",\"dateModified\":\"2022-07-28T18:34:43+00:00\",\"author\":{\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/06131ee5ca35862440ab2ed1ade7cc4a\"},\"description\":\"As Shared Services expands at many companies, adequate focus needs to be placed on segregation of duties and sensitive system access\",\"breadcrumb\":{\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Monitoring Segregation of Duties and Sensitive System Access in Shared Services\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#website\",\"url\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/\",\"name\":\"Peeriosity\",\"description\":\"Peeriosity Research\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/06131ee5ca35862440ab2ed1ade7cc4a\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f40a0d8493f8ff51d8560c30b5fa9933?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f40a0d8493f8ff51d8560c30b5fa9933?s=96&d=mm&r=g\",\"caption\":\"admin\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Segregation of Duties and Sensitive System Access | Peeriosity, LLC","description":"As Shared Services expands at many companies, adequate focus needs to be placed on segregation of duties and sensitive system access","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/","og_locale":"en_US","og_type":"article","og_title":"Monitoring Segregation of Duties and Sensitive System Access in Shared Services","og_description":"As Shared Services expands at many companies, adequate focus needs to be placed on segregation of duties and sensitive system access","og_url":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/","og_site_name":"Peeriosity","article_published_time":"2016-08-17T22:42:37+00:00","article_modified_time":"2022-07-28T18:34:43+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/","url":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/","name":"Segregation of Duties and Sensitive System Access | Peeriosity, LLC","isPartOf":{"@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#website"},"datePublished":"2016-08-17T22:42:37+00:00","dateModified":"2022-07-28T18:34:43+00:00","author":{"@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/06131ee5ca35862440ab2ed1ade7cc4a"},"description":"As Shared Services expands at many companies, adequate focus needs to be placed on segregation of duties and sensitive system access","breadcrumb":{"@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2016\/08\/monitoring-segregation-of-duties-and-sensitive-system-access-in-shared-services\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.peeriosity.com\/shared-services\/articles\/"},{"@type":"ListItem","position":2,"name":"Monitoring Segregation of Duties and Sensitive System Access in Shared Services"}]},{"@type":"WebSite","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#website","url":"https:\/\/www.peeriosity.com\/shared-services\/articles\/","name":"Peeriosity","description":"Peeriosity Research","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.peeriosity.com\/shared-services\/articles\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/06131ee5ca35862440ab2ed1ade7cc4a","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f40a0d8493f8ff51d8560c30b5fa9933?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f40a0d8493f8ff51d8560c30b5fa9933?s=96&d=mm&r=g","caption":"admin"}}]}},"_links":{"self":[{"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/posts\/2697"}],"collection":[{"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/comments?post=2697"}],"version-history":[{"count":11,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/posts\/2697\/revisions"}],"predecessor-version":[{"id":5539,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/posts\/2697\/revisions\/5539"}],"wp:attachment":[{"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/media?parent=2697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/categories?post=2697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/tags?post=2697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}