Dynamic Segregation of Duties
Dynamic Segregation of Duties is a SoD model enforced through contextual rules and live authorization logic rather than only through static role conflicts.
- Acronym
- Dynamic SoD
Definition
Dynamic Segregation of Duties is an access control approach in which toxic combinations are prevented by runtime rules that take into account the current transaction, ownership, prior actions, resource context, or business state. It goes beyond static SoD by evaluating whether a user should be blocked in a given situation, even if they technically hold multiple rights.
Why it matters
Dynamic SoD enables more nuanced risk management by considering actual business context rather than just static role assignments.
The Ariovis perspective
Segregation of duties must be tied to meaningful risk scenarios and supported by ownership, detection, decisions and remediation. A static list of conflicts is not enough.
Related services
Common pitfalls
- Dynamic SoD requires more sophisticated authorization infrastructure and may introduce latency in high-volume transaction processing.
Standards and protocols
- SOX
- GDPR
Resources
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.