Requirement · ISO-A.5.3
A.5.3 · Segregation of duties
Controls (4)
| Control | Name | Domain |
|---|---|---|
| SOD-01 | Segregation of incompatible duties in SAP | Segregation of Duties |
| P2P-01 | Purchase orders follow approval thresholds; no self-approval | Procure-to-Pay |
| P2P-02 | Vendor master changes require dual control | Procure-to-Pay |
| PAY-02 | Payment release requires maker-checker | Payments Security |