Is automatic mitigation available upon SoD detection?

• A. Yes, always
• B. No, it is not available
• C. Only in certain circumstances
• D. Yes, but requires configuration

Answer: (B)

Automatic mitigation during Segregation of Duties (SoD) detection is not available as a standard feature within identity governance tools, which typically requires manual intervention to address any conflicts identified. Organizations are generally responsible for defining their mitigation strategies, including how to manage risks associated with SoD violations, which often involve manual reviews and processes.

While some identity security solutions may offer advanced workflows that can help streamline the mitigation process, automatic resolution of detected conflicts is not common without explicit configuration or customization. It's essential for organizations to understand their specific governance requirements and the capabilities of their identity governance solution to manage SoD conflicts effectively.

Options implying automatic mitigation as always available or under certain circumstances misunderstand the fundamental nature of SoD management. While configuration may enable certain automated responses to compliance issues, relying solely on automatic mechanisms for SoD violations could pose risks, as they might not account for the contextual nuances of each situation. Therefore, understanding the limitations of automated processes is critical in maintaining robust governance practices.