Segregation of duties
Segregation of duties, right under Overview in the Nomasx-1 menu, follows the conflicts the SoD matrix finds in the access of every connected application: how many, which risks, which roles cause them, which conflicts were actually exercised, and how it evolves from one refresh to the next.
At a glance
The bar
The Period — Last 12 months when the page opens — applies to the trend chart. Application: All gives the totals across the applications; picking one narrows every widget to it. Excel and PDF export the page as it stands.
The four figures
| Card | Figure | Detail line |
|---|---|---|
| Users in conflict — at the latest refresh | The users carrying at least one conflict. | The privileged ones, and the date of the latest refresh. |
| Conflict lines — user × risk × activity pair | Every conflict found. | The risks hit and the processes concerned. |
| Proven by activity — both conflicting activities actually used | The users who used both sides of a conflict, according to the activity log. | The proven conflict lines. |
| Roles involved — roles carrying one side of a conflict | The roles involved. | The role pairs behind the conflicts. |
A conflict is proven when the user's activity log shows transactions on the objects of both incompatible activities: the risk is not theoretical. It needs the activity log to be collected.
Trend and detail
| Widget | Shows |
|---|---|
| Conflicts per refresh | The conflict lines at each refresh of the period, stacked by risk level — the trend of the remediation. |
| Risks hit | The risks with the most users first; the dot gives the risk level — red for high or critical, orange for medium, blue otherwise. |
| Role pairs | The pairs of roles that create the most conflicts, with the users concerned: red for a conflict inside a single role — fix the role and every holder is resolved —, orange for two roles held together. |
| Users with the most conflicts | The users carrying the most conflict lines, with the number of processes; privileged accounts are flagged. |
| Per process | The users in conflict per business process. |
| Investigate | Links to the conflict screens — Summary, Details, Proven, Users, Roles — and to the Data Explorer, where the Segregation of duties model goes further. |
Who sees it
Each widget shows only when the user may run its query, and the row-level scope of the user's roles applies to every figure and to the export.
Related
- Overview — Audit synthesis — the synthesis of the whole application.
- Security review — the accounts and rights to review.
- Jobs — refresh the conflicts: Collect security and SoD.