1 min lesson
Separation of duties: the governance concept for AI
Say what this means in practice: "Separation of duties (SoD) is the load-bearing wall of change management and it is exactly the concept AI autonomy stress-tests."
Step 1 of 2
Remember one thing for the governance conversation: separation of dutiesNo single person can author, approve and deploy the same change. The core control AI autonomy has to respect. Press Enter for the full definition. (SoDSeparation of Duties. Short for separation of duties: the rule that authoring, approving and deploying a change never sit with one person. Auditors use the acronym; the control is the same. Press Enter for the full definition.) is the load-bearing wall of change management and it is exactly the concept AI autonomy stress-tests. Author ≠ approver ≠ deployer. No single actor can move a change end-to-end alone.
SoDSeparation of Duties. Short for separation of duties: the rule that authoring, approving and deploying a change never sit with one person. Auditors use the acronym; the control is the same. Press Enter for the full definition. exists to defeat malice and mistake at once. If the person who writes the change is also the only one who approves it and the only one who pushes it to production, you have a single point of failure for fraud and for error. Auditors treat a broken SoD boundary as a material weakness. In SOXSarbanes-Oxley Act. A US law that forces companies to keep auditable controls over any system that affects their financial reporting. Press Enter for the full definition.-scoped systems it is non-negotiable.
Interactive diagram. Tab through its regions; each focused region shows its detail in the panel below.
The agent is a powerful author. It is never the approver. The human reviewing the scoped diff holds the approval gate; CI/CD holds the deploy gate. AI doesn't remove a role. It amplifies exactly one of them.