Segregation of Incompatible IT Functions
The previous chapter stressed the importance of segregating incompatible duties within manual activities. Specifically, operational tasks should be segregated to:
1. Separate transaction authorization from transaction processing.
2. Separate record keeping from asset custody.
3. Divide transaction-processing tasks among individuals such that short of collusion between two or more individuals fraud would not be possible.