App Risk Series: Separation of Duties 3.0

To compete effectively in today’s global marketplace, companies must embrace digital information and emerging technologies. Yet, these advances can also make an organization more vulnerable to data access and security risks.

One important way to mitigate such risk is separation of duties (SOD). SOD, a long-standing building block of sustainable risk management and internal controls, is a “checks-and-balances” approach that prevents a single person from controlling all aspects of a transaction. However, as organizations have become more complex and more reliant on numerous loosely integrated applications, it has become far more difficult to administer effective SOD.

Join KPMG on May 12, 2021 for a CPE webcast focused on Separation of Duties (SOD) 3.0, a next-generation approach that uses predefined role definitions that are directly aligned with front, middle, and back office business processes. These predefined roles are designed to work with application controls and address data security, user access administration risk, and compliance requirements. They continue to protect the organization long after they are put into place by adapting to changing business needs.

Agenda items include:

• Shifting risk landscape and the need for SOD
• The expanding deal market and SOD’s role in M&A
• SOD during the audit process
• The SOD 3.0 target operating model
• Five steps to SOD 3.0

During this webcast you will have the opportunity to learn about the KPMG Application Security & Controls framework, a cross-application view of cloud application security and controls. It is positioned to help industry-leading organizations effectively balance the divergent tasks of leveraging modern applications to empower business users while simultaneously protecting sensitive data and transactions.