How do you manage Segregation of duties (SOD) ?

[yermakoff]

Hi all,

Looking to see if anyone had to deal with managing segregation of duties to meet auditors information security key controls.

Found similar question was asked about a year ago.

Refreshing just in case someone able to share their best practices.

Many thanks,
Vadim

[Brad Tilton]

In terms of development segregation, my favorite setup is giving developers the admin role in dev/test, and then a couple of different admins the admin role in prod. That way developers are not moving and committing their own update sets.

To segregate further you might even look into delegated development.

[yermakoff]

Thanks Brad