{"id":32981,"date":"2021-09-20T07:25:07","date_gmt":"2021-09-20T07:25:07","guid":{"rendered":"https:\/\/compliancenow.nagarro-es.com\/?p=32981"},"modified":"2023-03-31T13:07:58","modified_gmt":"2023-03-31T13:07:58","slug":"segregation-of-duties","status":"publish","type":"post","link":"https:\/\/compliancenow.eu\/en\/blog\/segregation-of-duties\/","title":{"rendered":"If it can happen in Denmark, it can happen anywhere."},"content":{"rendered":"

If it can happen in Denmark, it can happen anywhere.<\/h2>\n

With just short of 6 million people we Danes are extremely proud of our small, progressive and innovative country where everything seems to be under control.<\/em><\/p>\n\n\n

\n
\n

According to the annual World Happiness Report we are the second happiest country in the world, just surpassed by our fellow Nordic friends from Finland. For 3 out of the last 5 years we have topped the Corruption Perceptions Index table, meaning that we are one of the least corrupt countries in the world.<\/p>\n

Ask OECD about countries with the best work-life balances, and you will notice that here we are constantly battling for 1st place with our like-minded Dutch friends. We have the shortest working week in the world, and yet, we are reported as one of the most productive and hardworking work-forces in Europe. <\/p>\n\n\n\n

<\/p>\n<\/div>\n\n\n\n

\n
\"segregation<\/figure>\n<\/div>\n<\/div>\n\n\n

We have a well-functioning welfare system, free education and healthcare and all workers are statutorily entitled to 5 weeks of vacation each year.<\/p>\n

Remember the saying \u2018the grass is always greener on the other side\u2019?<\/h2>\n

<\/p>\n

We do too. Though, we do not really believe in it. For us Danes the grass will always be greenest in Denmark.<\/strong><\/p>\n

Can it all be that perfect though? Or might there actually be something rotten in the state of Denmark as Marcellus would say?<\/em><\/p>\n

During the past years we have witnessed several financial scandals raising a massive media attention. Financial scandals that we from time to time read about in newspapers from abroad, but never imagine could happen in our small country of Denmark. However, those scandals are now also a part of our reality.<\/p>\n

The financial scandals in Denmark have two keywords attached to them \u2013 \u2018State-owned companies\u2019<\/strong> and \u2018Segregation of Duties\u2019.<\/strong> Due to their lack of having an efficient Segregation of Duties system in place, we have witnessed several state-owned entities being scammed by enormous amounts from their own employees.<\/p>\n

How could a regular social-service worker transfer public funds to her own accounts for more than 25 years without being caught? And how could she execute more than 300 transactions for a total amount equaling more than 15 million euros to her own accounts without anyone raising their eyebrows?<\/em><\/p>\n

Segregation of Duties is the answer. Or to word it better; the lack of Segregation of Duties<\/strong> is the answer.<\/strong><\/p>\n

Segregation of Duties<\/strong>, or SoD<\/strong>, have often been neglected and down prioritized in both private and public companies due to the perception that an SoD tool is complex, expensive and has a long implementation time. Many larger companies are still handling their SoD process manually, which turns out to be an almost impossible task. With the almost endless combinations of SoD roles, t-codes, functionalities and objects, it is certain that one cannot be up to date with their SoD process at any given time. Those combinations are not intended to be manually handled by us humans.<\/strong> No matter of how brainy and nerdy we like to be, those SoD combinations can and will give headaches and nightmares for even the best of us.<\/p>\n

From the example above, it is very likely that with the right SoD system in place, it would never have been possible for a regular worker to misuse her critical functions for 25 years and scamming the Danish welfare-state of more than 15 million euros. With Segregation of Duties in place she would have not been able to execute two critical functions at the same time.<\/p>\n

In this specific example the convicted worker was able to create fictive projects and funds, and later performed more than 300 transactions over 25 years to a series of bank accounts belonging to herself. This could all have been prevented if the Segregation of Duties were in place. Then she would never have had the critical access to both<\/strong> create projects and<\/strong> transfer funds for the projects.<\/p>\n

While the lack of Segregation of Duties might often be related to financial consequences<\/strong>, one also has to consider the reputational consequences<\/strong> it can have for a company. The cases we see in media are just the tip of the iceberg.<\/strong> Those are just the cases that has been exposed, while there are many others that has been swept under the rug. While private-owned companies have the possibility to keep these negative cases away from the public and the media, the public-owned companies have a much harder time keeping these scandals hidden from the outside world. The public-owned companies can be looking into a severe reputation-loss on the background of SoD scandals as well as enormous expenses in order to clean up after the damage has been done.<\/p>\n

Therefore, having your Segregation of Duties in place is of the utmost importance for all public and private companies. Not just because of the example related to critical functions above. Segregation of Duties is important due to several factors:<\/strong><\/p>\n

<\/p>\n\n\n

\n
\n