VOCE Agent Conformance · AUTH-04

Segregation of duties

Are incompatible actions separated so one agent or principal cannot initiate and approve the same critical transaction?

Authorization & authorityA2+CriticalPermanent control URL
Normative wording

AUTH-04 · Segregation of duties

Are incompatible actions separated so one agent or principal cannot initiate and approve the same critical transaction?

DomainAuthorization & authority
Expected ownerRisk / Internal Control
Minimum maturityA2+
CriticalityCritical
Target evidence stateTested
Expected evidence

Expected evidence

  • SoD matrix
  • Conflict test
Method

How to read this control.

This control belongs to VOCE Agent Conformance. Its identifier and normative wording remain identical across language versions so there is one reference, not three variants. Status depends on dated evidence, not a vendor declaration or aggregate score.

Open Agent Conformance →