Business policies --- Hi Thomas, interesting point you mention. There are indeed company policies like rotating jobs, where people continuously move between different responsibilities in the same department or separation of duties. As you can imagine, the objective is to split the knowledge and do not depend on one person.

The problem as you mention is something that has to be monitored. The policies without supervision are worthless.

The same works for the laterally move. The system logs everything, but if no one is checking on the logs, less or nothing happens if the system detects unusual access.

Source author: Alan Kaheri Chavez Castro itsupportirl@sre.gob.mx