Separation of concerns
Segregation of duties
Six duty pairs that should not sit in one pair of hands. more
Health
Whether incompatible duties are separated
Segregation rules in force, the conflicts detected against them and how many have been mitigated.
This is the finding, not a decoration. 291 of 385 conflicts have no named owner and no remediation date. Detection is working; triage is not keeping up with it. That gap is carried as an open exception on CTL-005.
The duty pairs
What each rule separates, how it is enforced, and how many holders it currently finds.
SOD-01Raise and approve the same item
Raise a request or a work itemagainstApprove, escalate or clear that same item
CriticalBlocking
The oldest control in existence. more
When it is breached: The decision interface refuses the action, names the rule, and writes a refusal record to the evidence spine under the requester identity.
8
detected live
8
on the books
0
unowned
4
mitigated
SOD-02Own a station and clear its own gate
Own the station that produces the workagainstApprove the gate that checks that station
HighDetective
A gate approved by the person who owns the work upstream of it is a formality. more
When it is breached: Detected and listed. Not blocked, because in many small functions there is genuinely nobody else — the compensating control is that the conflict is named and owned.
153
detected live
153
on the books
122
unowned
13
mitigated
SOD-03Approve a policy and clear the gate it governs
Approve the policy itemagainstApprove a gate on a line the policy binds
HighDetective
Writing the rule and then judging compliance with it collapses two independent checks into one opinion.
When it is breached: Detected and listed with the policy reference and the gate that is affected.
153
detected live
153
on the books
120
unowned
9
mitigated
SOD-04Own an agent and attest its own rating
Own the sub-function whose agents are being changedagainstStand behind the estate rating that grades those agents
HighDetective
A rating signed by the person whose numbers it grades is a self-assessment. more
When it is breached: Detected and listed. Independent re-rating is the remediation, not removal of the owner.
69
detected live
69
on the books
49
unowned
8
mitigated
SOD-05Delegate authority to oneself
Act as the delegator on an authority grantagainstHold the grant that was delegated
CriticalDetective
Self-delegation makes the authority register circular. more
When it is breached: Detected and listed. A self-delegated grant should be revoked and re-issued by the level above.
0
detected live
0
on the books
0
unowned
0
mitigated
No holder of this pair anywhere in the estate. Reported as zero because it is zero, not because the rule is switched off.
SOD-06Own a control and perform its own test
Own the controlagainstPerform the test that decides whether the control works
MediumDetective
This is the difference between "we have gates" and "the gates were tested by someone who does not run them".
When it is breached: Detected and listed. The test result is retained but is marked as not independent.
2
detected live
2
on the books
0
unowned
0
mitigated
Who holds both sides most often
Concentration matters more than the raw count. more
VP Revenue Growth Management5
Director, Legal Operations5
Director, Demand Development3
Director, Sales Enablement3
Director, Sales Compensation3
Director, Market Intelligence3
VP Demand Generation3
Director, Content3
Conflict register
29 matching, showing up to 120
Filtered to supply-chain · clear
| Reference | Holder | Where | Both sides | Owner and fix | State |
|---|---|---|---|---|---|
| SOD-01-F64B2B5ASOD-01 | Supply Chain CoSItem owner and raiser | Supply ChainReplenishment run — EMEA distribution centers | A. Raised SCM-3321 — Replenishment run — EMEA distribution centers B. Holds the decision on SCM-3321 in the same queue | Head of Platform SecurityA second approver from a different reporting line has been added to the gate. moredue 2026-08-29 | In remediation |
| SOD-01-F34B26A1SOD-01 | Planning leadItem owner and raiser | Supply ChainScenario twin — dual-source resin strategy | A. Raised SCM-3324 — Scenario twin — dual-source resin strategy B. Holds the decision on SCM-3324 in the same queue | Head of AI Business ServicesThe gate has been reassigned to the function leader one level above the station owner.due 2026-08-30 | In remediation |
| SOD-01-F44B2834SOD-01 | Supply Chain CoSItem owner and raiser | Supply ChainCarrier allocation — week 34 outbound | A. Raised SCM-3323 — Carrier allocation — week 34 outbound B. Holds the decision on SCM-3323 in the same queue | Head of Agent OperationsAccepted for now with a named risk owner and a review date, because no second qualified approver exists in this sub-function.due 2026-09-01 | Mitigated |
| SOD-02-BC8F8C4FSOD-02 | Director, Demand PlanningStation owner and gate approver | Supply ChainDemand Planning | A. Owns 3 stations on line SC1B B. Approves the same 3 gates: Escalate outside band, Leader review, Planner review | No owner assigned | Detected, unowned |
| SOD-02-44E3FD17SOD-02 | Director, Supply PlanningStation owner and gate approver | Supply ChainSupply Planning | A. Owns 3 stations on line SC2B B. Approves the same 3 gates: Escalate cost, Planner review, Leader decide | No owner assigned | Detected, unowned |
| SOD-02-F5269E2DSOD-02 | VP Integrated Business PlanningStation owner and gate approver | Supply ChainSales & Operations Planning | A. Owns 4 stations on line SC3B B. Approves the same 4 gates: Leader review, Ratify, Executive review and others | No owner assigned | Detected, unowned |
| SOD-02-87AB3373SOD-02 | Director, Inventory ManagementStation owner and gate approver | Supply ChainInventory Optimization | A. Owns 2 stations on line SC4C B. Approves the same 2 gates: Finance approve write-down, Approve above threshold | No owner assigned | Detected, unowned |
| SOD-02-7DE16FF1SOD-02 | Director, LogisticsStation owner and gate approver | Supply ChainLogistics & Transportation | A. Owns 2 stations on line SC5C B. Approves the same 2 gates: Leader review, Analyst review | No owner assigned | Detected, unowned |
| SOD-02-1F2521F6SOD-02 | Director, Fulfillment OperationsStation owner and gate approver | Supply ChainWarehouse & Fulfillment | A. Owns 1 station on line SC6B B. Approves the same 1 gate: Investigate variance | Head of AI Business ServicesThe gate has been reassigned to the function leader one level above the station owner.due 2026-09-23 | In remediation |
| SOD-02-0F6BE49CSOD-02 | Director, Global TradeStation owner and gate approver | Supply ChainTrade & Customs | A. Owns 2 stations on line SC7B B. Approves the same 2 gates: Specialist review, Legal review | Group Financial ControllerCompensating detective control: every clearance by the conflicted holder is sampled at 100 per cent rather than by attribute.due 2026-09-24 | In remediation |
| SOD-02-4CBAD91BSOD-02 | Director, Supplier CollaborationStation owner and gate approver | Supply ChainSupplier Collaboration | A. Owns 3 stations on line SC8A B. Approves the same 3 gates: Negotiate, Notify planner, Conduct | No owner assigned | Detected, unowned |
| SOD-02-F29C9CB9SOD-02 | Director, Order PromisingStation owner and gate approver | Supply ChainOrder Promising | A. Owns 2 stations on line SC9B B. Approves the same 2 gates: Owner approve, Leader review | Head of Platform SecurityA second approver from a different reporting line has been added to the gate. moredue 2026-09-26 | Mitigated |
| SOD-02-F521AF34SOD-02 | VP Supply Chain StrategyStation owner and gate approver | Supply ChainNetwork Design | A. Owns 4 stations on line SC10C B. Approves the same 4 gates: Leader review, Board approve, Approve study and others | No owner assigned | Detected, unowned |
| SOD-02-09931A0BSOD-02 | Director, Supply ResilienceStation owner and gate approver | Supply ChainResilience & Risk | A. Owns 4 stations on line SC11C B. Approves the same 4 gates: Ratify, Stand down, Activate playbook and others | No owner assigned | Detected, unowned |
| SOD-03-C14DF9CCSOD-03 | Director, Demand PlanningPolicy approver and gate approver | Supply ChainDemand Planning | A. Approved 2 policy items: SC1-POL-201, SC1-POL-200 B. Also approves gates on the lines those policies bind | No owner assigned | Detected, unowned |
| SOD-03-6575E89CSOD-03 | Director, Supply PlanningPolicy approver and gate approver | Supply ChainSupply Planning | A. Approved 3 policy items: SC2-POL-200, SC2-POL-201, SC2-POL-202 B. Also approves gates on the lines those policies bind | Group Financial ControllerCompensating detective control: every clearance by the conflicted holder is sampled at 100 per cent rather than by attribute.due 2026-09-12 | In remediation |
| SOD-03-8CBE549ASOD-03 | VP Integrated Business PlanningPolicy approver and gate approver | Supply ChainSales & Operations Planning | A. Approved 3 policy items: SC3-POL-201, SC3-POL-202, SC3-POL-200 B. Also approves gates on the lines those policies bind | Head of Agent OperationsAccepted for now with a named risk owner and a review date, because no second qualified approver exists in this sub-function.due 2026-09-13 | Mitigated |
| SOD-03-2B588C68SOD-03 | Director, Inventory ManagementPolicy approver and gate approver | Supply ChainInventory Optimization | A. Approved 4 policy items: SC4-POL-201, SC4-POL-203, SC4-POL-200, SC4-POL-202 B. Also approves gates on the lines those policies bind | Head of Platform SecurityA second approver from a different reporting line has been added to the gate. moredue 2026-09-14 | In remediation |
| SOD-03-DE964928SOD-03 | Director, LogisticsPolicy approver and gate approver | Supply ChainLogistics & Transportation | A. Approved 3 policy items: SC5-POL-200, SC5-POL-202, SC5-POL-201 B. Also approves gates on the lines those policies bind | No owner assigned | Detected, unowned |
| SOD-03-2755958FSOD-03 | Director, Fulfillment OperationsPolicy approver and gate approver | Supply ChainWarehouse & Fulfillment | A. Approved 2 policy items: SC6-POL-201, SC6-POL-200 B. Also approves gates on the lines those policies bind | No owner assigned | Detected, unowned |
| SOD-03-250A83DDSOD-03 | Director, Global TradePolicy approver and gate approver | Supply ChainTrade & Customs | A. Approved 4 policy items: SC7-POL-202, SC7-POL-200, SC7-POL-203, SC7-POL-201 B. Also approves gates on the lines those policies bind | Head of Agent OperationsAccepted for now with a named risk owner and a review date, because no second qualified approver exists in this sub-function.due 2026-09-17 | In remediation |
| SOD-03-B0C812C4SOD-03 | Director, Supplier CollaborationPolicy approver and gate approver | Supply ChainSupplier Collaboration | A. Approved 3 policy items: SC8-POL-201, SC8-POL-200, SC8-POL-202 B. Also approves gates on the lines those policies bind | No owner assigned | Detected, unowned |
| SOD-03-F21AC046SOD-03 | Director, Order PromisingPolicy approver and gate approver | Supply ChainOrder Promising | A. Approved 4 policy items: SC9-POL-201, SC9-POL-203, SC9-POL-202, SC9-POL-200 B. Also approves gates on the lines those policies bind | No owner assigned | Detected, unowned |
| SOD-03-97473127SOD-03 | VP Supply Chain StrategyPolicy approver and gate approver | Supply ChainNetwork Design | A. Approved 2 policy items: SC10-POL-201, SC10-POL-200 B. Also approves gates on the lines those policies bind | No owner assigned | Detected, unowned |
| SOD-03-B433B520SOD-03 | Director, Supply ResiliencePolicy approver and gate approver | Supply ChainResilience & Risk | A. Approved 3 policy items: SC11-POL-201, SC11-POL-200, SC11-POL-202 B. Also approves gates on the lines those policies bind | No owner assigned | Detected, unowned |
| SOD-04-CAA7262ESOD-04 | Director, Inventory ManagementSub-function owner and rating attester | Supply ChainInventory Optimization | A. Owns 8 agents running at autonomy level 84 B. Stands behind the A estate rating that grades those same agents | No owner assigned | Detected, unowned |
| SOD-04-B1DBF898SOD-04 | Director, LogisticsSub-function owner and rating attester | Supply ChainLogistics & Transportation | A. Owns 9 agents running at autonomy level 82 B. Stands behind the A estate rating that grades those same agents | No owner assigned | Detected, unowned |
| SOD-04-191E39A8SOD-04 | Director, Fulfillment OperationsSub-function owner and rating attester | Supply ChainWarehouse & Fulfillment | A. Owns 8 agents running at autonomy level 84 B. Stands behind the A estate rating that grades those same agents | No owner assigned | Detected, unowned |
| SOD-04-B3E293ECSOD-04 | Director, Supplier CollaborationSub-function owner and rating attester | Supply ChainSupplier Collaboration | A. Owns 8 agents running at autonomy level 79 B. Stands behind the A estate rating that grades those same agents | No owner assigned | Detected, unowned |
Actions
What is waiting on a person
A separation rule is only real when somebody unwinds the combinations it forbids. more
291
Start unwinding a detected conflict
Found by the rule and nobody has picked it up.
60
Finish a remediation already underway
Owner named, plan written, not yet closed.
60
Escalate a conflict past its date
Past the remediation date on the record and still combining both duties.
5
Decide whether a detective rule should block
These rules report a conflict after the fact instead of preventing it.
Operations
What this desk is allowed to start
A surface that only reports is not operable. more
Trigger and bound
This desk can raise, reassign or mitigate a conflict, and it can change a rule between detective and blocking. more
Live observability
What the record shows right now
Conflict states across the estate. more
Current distribution
385 conflicts
Detected, untouched29176%
In remediation6016%
Mitigated349%
Is policy and strategy coming to fruition
Whether the written intent is holding here
351 live conflicts against 6 written rules, and 5 of those rules cannot stop anything.
Not holding on the record
The written position is that no single holder should be able to both initiate and approve the same class of commitment. more
How to read this honestly
One rule is blocking and five are detective. SOD-01 is refused at the decision interface — the person who raised a work item cannot approve it, the attempt fails with the rule named, and a refusal record is written to the evidence spine. The other five are found and listed but not prevented, because in a sub-function with one senior person there is genuinely nobody else to hold the second duty. Naming the conflict and giving it an owner is the compensating control, and 291 of them do not have one yet.
The live detector and the standing register are computed by the same code, so they cannot drift apart. 4 conflicts are visible to the detector but have never been triaged onto the register. 4 rows on the register are no longer found in the estate and can be closed.