I am working on developing an add-on for real-time SOD prevention, detection and reporting. Major part of which is the SOD rule set (upto page level). I have pretty much developed the rule set and identified page level information for participating activities. Is there any SOD matrix and/or related information available that i can use to further enchnace the rule set. any suggessions/recommendations?
How organizations currently deal with SOD issues?
How they make sure that role design doesn't have built-in conflicts?
How they identify role level SOD?
How they make sure that conflicting roles are not being assigned to a user?
How they report on SOD violations?