In the municipal ERP, the same accounts-payable clerk can create a…

Question

In the municipal ERP, the same accounts-payable clerk can create a new vendor record and approve that vendor’s payment. Which design change best applies separation of duties?

Accepted Answer

Split vendor creation and payment approval into distinct roles held by different people with workflow enforcement — One person who can invent a vendor and cut the check is writing checks to an imaginary cousin. Separation of duties splits those keys across two people so fraud needs collusion, not just one busy afternoon.

Answer

Allow the clerk to keep both rights but require a longer password

Answer

Combine create-vendor and approve-payment into one “super clerk” role for efficiency

Answer

Move both functions to an unpaid intern so managers stay clear of fraud risk

In the municipal ERP, the same accounts-payable clerk can create a new vendor record and approve that vendor’s payment. Which design change best applies separation of duties?

Short Explanation

Full Explanation