Segregation of Duties Violations(5.6.6)

Segregation of duties (SoD) is a fundamental compliance control: the person who creates work should not also be the sole person who approves its completion. When the same actor creates and closes an issue without any other actor contributing, it is a SoD violation — a signal that independent review is not happening.

This visual tracks the rate of SoD violations over time so you can see whether this pattern is isolated or systematic.

What you can conclude

• A rising SoD violation rate indicates that independent review is becoming less common. Where your control framework expects two-actor closure, these are the cases that would not meet it.
• A consistently low SoD violation rate indicates that separation of duties is being maintained across the portfolio.
• A spike in a specific week may correlate with a sprint crunch or a specific event — worth investigating the context.

How this chart works

Weekly stacked bar chart showing count of SoD violations (creator = closer, no peer involvement) alongside total closures. Use the date and project filters to focus on specific teams or periods.

Separation of duties is a common control objective in DORA and NIS2 programs; teams preparing either review commonly start here.