Approval group
Payments
The lines where money leaves: the payment run, urgent and manual payments, changes to the company's bank accounts and to supplier bank details, expenses and payroll. These carry most of the segregation of duties pairs.
The approval families
6| Family and a line that matches it | Marked | Clauses |
|---|---|---|
| Payment run releasePayment run release: AP Manager and Treasury Manager | high-risk | ISO/IEC 27001 5.3 · COSO P8 |
| Urgent and manual paymentsUrgent manual payments up to 100,000: Treasury Manager | high-risk | ISO/IEC 27001 5.3 · COSO P10 |
| Bank account opening and changesBank account changes: Finance Director | high-risk | ISO/IEC 27001 5.3 · COSO P10 |
| Vendor master data changeVendor master data change: AP Manager | high-risk | ISO/IEC 27001 5.3 · COSO P8 |
| Employee expense claimsEmployee expense claims up to 5,000: Head of Department | ISO/IEC 27001 5.3 · COSO P10 | |
| Payroll releasePayroll release: Payroll Manager | ISO/IEC 27001 5.3 · COSO P10 |