One person should never be able to create a vendor and then pay it. When a vendor is paid without approval, fraud becomes easier. • Splitting a process converts unilateral fraud into required collusion • Small teams substitute dual control, rotation and independent review • Toxic role combinations only appear when you model roles together CISSP Domain 7: Security Operations #CISSP #SegregationOfDuties #SecurityOperations #CyberSecurity #InfoSec #StudyTips