Example of the model relating to the principle of segregation of duties within internal control and risk reduction effects

Fraud incidents are becoming more common today in companies with weak internal control policies and security vulnerabilities. Conflicts between critical tasks lead to significant risks in the system. With a healthy internal control system, it is possible to prevent fraud and control risks. In this study, a model for the application of the principle of Segregation of Duties is proposed in order to prevent fraud in companies and reduce risks within the company. This model proposal includes controlling and managing user privileges with an access control. Following the Separation of Duties principle, a role-based structure covering processes was prepared. A detailed process related to the Segregation of Duties principle has been studied with a risk-based approach. By emphasizing the risk management cycle, every stage developed to reach an application in line with the Segregation of Duties principle has been evaluated in this study.