Separation of Duties in Everyday Life





This is a separation of duties control you’ll find all around you:

You go to a movie theater and buy your ticket from person #1. You then go to person #2, who gives you access to the theater once you give them the ticket you just purchased moments before. Is this merely a full employment program instituted by the entertainment industry? No. It’s a classic separation of duties control; separating the receipt of money, from access to the service. If person #1 takes your money, gives you no ticket, and just ushers you forth; person #2 will not let you in the theater. You will be upset.

The control of issuing a serialized ticket tied to the receipt of payment is enforced by the control limiting access to the service in exchange for the issued ticket.

There are a number of variations on this that you can identify in many retail businesses.


No comments yet.

Leave a Reply