Exercise 2: Setting up segregation of duties

Scenario:

The HR department of USMF has requested a rule for segregation of duties for two duties: Access benefits workspace and Approve production journal. As a system administrator, you need to create the rule in Finance and Operations apps.

Complete the following procedure to create a rule. You must be a system administrator to complete the procedure.

Instructions

1. Select Modules from the left navigation bar.

2. In the System administration module, navigate to Security > Segregation of duties > Segregation of duties rules.

3. Select + New.

   • In the Name field, enter a name for the rule such as My segregation of duties rule

   • In the First duty field, select the drop-down button to open the lookup. In the list, find and select the first duty that is controlled by the rule (Access benefits workspace).

   • In the Second duty field, select the drop-down button to open the lookup. In the list, find and select the second duty that is controlled by the rule (Approve production journal).

   • In the Severity field, select Medium. This is the severity of the risk that occurs when the same user or role performs both duties.

   • In the Security risk field, enter a description of the security risk such as HR-Production

   • In the Security mitigation field, enter a value such as Managerial review is necessary

   Enter a description of the actions that you will take to mitigate the security risk. For example, you can mitigate the risk by conducting more detailed reviews of the process, by conducting a monthly managerial review, or by sharing resources with other departments.

4. Select Save.

5. Close the page.