Browse Prior Art Database

Aggregate Separation of Duties Analysis Tool

IP.com Disclosure Number: IPCOM000206259D
Publication Date: 2011-Apr-15
Document File: 4 page(s) / 102K

Publishing Venue

The IP.com Prior Art Database

Abstract

Disclosed is a tool which automates the analysis of separation of duties (SoD) across multiple applications and identifies where any conflicts may exist. The tool enables an organization to more easily manage its aggregate separation of duties posture, no matter how many operational systems are used.

This text was extracted from a PDF file.
This is the abbreviated version, containing approximately 51% of the total text.

Page 01 of 4

Aggregate Separation of Duties Analysis Tool

In a business environment where an organization may utilize multiple applications to perform its end to end process, it is important not only to analyze the issue of separation of duties within each respective application used, but also to analyze separation of duties across each application to ensure that an employee does not possess any extraordinary abilities throughout the process that could result in a loss of company assets.

To date, this has been a manual process of listing each employee in a function, creating a matrix of the tasks that each employee can perform, and then analyzing those tasks for conflicts. This process however, becomes exponentially more difficult and time consuming as the number of employees, as well as tasks, in the function increases. The current process also relies on manual updates for any changes that take place in an employee's job description or employment status, which again becomes very time consuming to keep up with changes in a large dynamic working environment.

The disclosed invention simplifies this process by automating the process for the separation of duties analysis and identifying where any aggregate separation of duties conflicts may exist.

This invention is a tool which automates the analysis of separation of duties (SoD) across multiple applications and identifies where any conflicts may exist. The tool enables an organization to more easily manage its aggregate separation of duties posture, no matter how many operational systems are used. By using this invention, the number of people as well as the number of transactions that need to be analyzed no longer has a significant effect on the administrative time required to perform the analysis. In addition, by obtaining the required information directly from each application used, the tools output dynamically updates along with any changes made as an employee's job responsibilities and authorizations change. This allows the organization to consistently and easily stay up to date on its analysis.

This tool can be implemented into any organization which uses multiple applications to perform its end to end process and has a means of obtaining the necessary information from each application. To implement this tool, an organization must first define what its critical job tasks are and what combination of these tasks creates an SoD conflict. It must then be determined which local system transactions within t...