SoD — Process
Catalog of business processes that group the activities monitored by the segregation-of-duties matrix.
SoD — Activities
Named activities within each business process — the atomic units the segregation-of-duties matrix combines.
SoD — Risks
Named risks within each business process, with the severity level used to weight the segregation-of-duties findings.
SoD — Matrix
Pairs of incompatible activities — the SoD matrix that defines which activity combinations trigger which risk.
SoD — Objects
Source-system programs attached to each SoD activity — the technical objects whose execution counts as performing the activity.