entrebits

SoD matrix analysis

Import a CSV of users/groups × routines and identify segregation-of-duties (SoD) conflicts, fraud or error risks and weaknesses in access controls.

The file is read only in your browser — no access data is sent

1. Access (user or group × routine)

CSV or TXT exported from the ERP. Recognized columns: usuario, grupo, rotina (code/screen/menu), descricao and, optionally, acesso (view/insert/update). It also accepts a matrix with routines in the columns and “X” in the cells.

…or paste the content

2. User × group link (optional)

Use it when the access file is by group: tell us which users belong to each group (columns usuario and grupo).

…or paste the content

Conflict rules used — turn them on or off according to your policy

Sensitive functions and how they are recognized

Each routine is compared (code + description, without accents) with the patterns below. Senior table codes (e.g. 095FOR, 501TCP) are suggestions: confirm the codes and screen names in your environment and classify whatever is missing manually.

What segregation of duties (SoD) is

Segregation of duties is the principle that a single person should not control every step of a critical transaction, for example, registering a supplier, posting the bill and making the payment. When that happens, errors and fraud can go unnoticed.

  • High risk: lets someone execute and hide an improper transaction (e.g. pay and reconcile the statement).
  • Medium risk: weakens an important control (e.g. buy and receive the goods).
  • When separation is not possible (small teams), adopt compensating controls: periodic review by a manager, exception reports and audit trails.

The analysis supports access reviews and does not replace an audit. Results depend on the file quality and on how routines are classified.

Other assessments

ROI Simulator Return, payback, NPV and IRR for ERP, automation and process projects. ERP usage maturity Score by dimension, maturity level and action plan. IT tools SQL, JSON, XML, diff, converter, NF-e key and more.