In many organizations, responsibility for testing Segregation of Duties is relegated to the IT auditor. The reasoning behind this assignment correlates SOD controls to logical system access.

-If you were an IT Auditor in an organization, what type of business risks would you consider? (3 examples)

-What type of control mechanisms would you put in place for more efficient audit procedures.

Explain its relevance from every perspective.