Workshop: Using data analysis to identify SOD issues

NOVEMBER 19, 2021

Alain Rousseau presenting SoD workshop at IIABel
Alain Rousseau presenting the data analysis workshop on "Segregation of Duties" at IIA Belgium.

In this workshop, we identified SOD issues with a practical example.
This live in-person workshop was organised by Belgian chapter of the IIA on November 19th 2021.

What was the workshop about?

SoD, or segregation of duties, is a well-known concept. But how do you verify that this concept is indeed properly configured in the CRM system or other tools? In short, how do you identify SoD issues?

Did you miss this workshop?

Not to worry, this use case takes you through all the steps to evaluate the SoD configuration. Also, please feel free to contact us for more details or an online session.

Arbutus Analyzer project overview showing all components for the SoD project. The data tables are organised in folders.

Using a specialised data analysis tool (Arbutus Analyzer), we demonstrate how to identify SoD issues.

We take you through all the steps of analysing the permissions as configured for hundreds of users by comparing those with a list of combinations that are not be allowed.

By way of deliverable, we create a detailed report that documents those SoD transgressions per user.

As a bonus, we illustrate how the return on investment can be increased by scheduling this test on a weekly basis to alert local managers so they can take prompt action; in effect turning the audit effort into an effective continuous monitoring system.

Why attend?

Those that need to identify segregation of duties problems, or access control in general will surely find this workshop interesting indeed. Equally, auditors who are interested in data analytics in general, or who are exploring the landscape for ideas and tools will find value in the presentation and approach.

In addition, after the workshop we can arrange for you to have access to the same data analysis software with a temporary license.

Bread sandwich nicely garnished

Oh, and did we mention?

A sandwich lunch is included, so indeed there is such a thing as a free lunch!

Also 1 CPE credit will be awarded for attending this workshop.

Practical details


Friday 19th of November 2021, 12:00 to 13:30


The workshop will be held at the offices of IIA Belgium.

What does it cost?

This is a free workshop.

There is no charge; so you only invest your lunchtime.

Still, you must register beforehand!

Who is the speaker?

The host will be Alain Rousseau; the driving force behind Sepia Solutions. He has focussed on audit software tools since 2007 and implemented data analysis tools (Arbutus Analyzer, ACL) and audit management tools (PAWS, Pentana Audit) at dozens of audit departments.

With an education and background that is both technical (industrial engineer) and business (MBA), Alain is the ideal interface between business users and software developers. His in-depth understanding of the software packages and a firm understanding of the audit profession also makes him an excellent trainer and consultant for these software packages.

As part of the IIA’s Master Class Internal Audit Essentials, he recently wrote a paper discussing the effect of audit software on meeting the IIA’s IPPF standards.

Registration details – Registrations closed

Did you miss the workshop but are you still interested in the use case?
Good news then! This use case is fully documented here:

Word cloud graph created with Arbutus Analyzer 7.0 illustrating SoD issues as colourful collection of transaction types.

Identify SoD issues with data analysis

In this use case, we illustrate step by step how you can identify SOD issues using Arbutus Analyzer (a versatile data analytics tool). [read more]

    Wish to evaluate Arbutus Analyzer yourself ?

    Do you wish to evaluate Arbutus Analyzer yourself?
    Well then, initiate your request right now!

    We will get in touch with you to discuss your organisation, your data analysis objectives, your data sources, your project and the the evaluation criteria.

    When your request has been approved, we will assist you in installing the software and evaluation license, accessing your data sources and running analyses. You will be able to evaluate the software's full capability. So what are you waiting for?

    Fill out this form and we will take it from there.