Common questions about segregation of duties analysis, what you receive, and how the process works. If your question is not here, book a free 15-minute consultation and ask it directly.
Common Questions
Segregation of duties means separating tasks so no one person has unchecked control over a transaction from start to finish. For example, the person who creates a vendor should not also approve the payment to that vendor.
It is a service powered by our own software, with results reviewed by experienced practitioners. You buy the finished diagnostic, not a software license. There is nothing for your team to set up or run. The SOD Check Method is yours to keep.
SOD Check guarantees results within 10 business days after we receive the required documents. We also stand behind the work with two guarantees: not satisfied, your money back; missed a conflict, that run is free. Expedited 5-business-day delivery is available for an additional fee, subject to capacity.
NetSuite, Workday, Zip, Coupa, Tipalti, Rippling, ADP, E*TRADE, Shareworks, and Salesforce. If your system is not listed, ask us. We can scope a custom diagnostic.
Your administrator exports user and permission data by following our instructions. For NetSuite, that is two standard reports, saved as CSV or Excel files, with a screenshot of each.
You upload your exports to a secure shared folder. It is either one your company controls or one SOD Check provides on a Microsoft-hosted platform. Only the engagement team assigned to your diagnostic can open it. Your signed contract includes an NDA. We keep customer data for one year. We never access your systems.
No. It means the access could allow it. Management looks at the context before deciding if anything needs to change. That includes responsibilities, workflows, work done outside systems, and other safeguards.
Yes. Companies often run SOD Check because an auditor asked for a segregation of duties analysis. Premium adds completeness, accuracy, and data-integrity evidence for the system reports used. Auditors look for this kind of evidence when they rely on company-produced information. Your external auditor decides if the evidence is enough.
Yes. SOD Check shows where the conflicts are, rates them, and recommends fixes for management to weigh. Run it again after changes to see what improved. SOD Check does not fix anything for you. Any broader help needs a scope we agree on in writing.
No. It finds potential conflicts and recommends options. Management decides. Your authorized team makes the changes.
No. Segregation of duties looks at conflicting responsibilities or access. A user access review asks whether access is right for the job more broadly.
It can help. The results may show users with administrator or other broad access they do not need. Moving them to a lower-cost license may be possible. Savings depend on your system and your license agreement.
Yes. A later diagnostic shows what improved after your changes. Pro compares two runs side by side.
