Library › Cybersecurity AI › Finance and accounting

Spot segregation of duties conflicts in finance access

  • For Finance and accounting
  • You practice Setting limits and rules
  • Time about 5 minutes

About this exercise

For the quarterly access review, find users whose roles break your segregation of duties rule: nobody may both create or edit vendors AND approve payments. List only the conflicting users, numbered, as 'user - conflicting roles - suggested fix (remove one role)'. Plain text, under 70 words.

Common mistakes when you ask AI for this

  • Using a stricter rule. The AI applies textbook segregation of duties and flags t.nakamura too. Try: Say: "Only the rule: vendor create/edit AND payment approval."
  • Accepting the manager's reason. The AI suggests an exception for j.chen because he's the AP manager. Try: Add: "No exceptions for seniority. Suggest removing one role."
  • Listing every user. The AI reviews all 6 users. Try: Ask: "List only conflicting users."
  • Trusting the AI to count words. AI is bad at counting. Ask for "under 70 words" and it often lands well over. Try: Ask for less than the limit and cap each line: "each line under 15 words, under 50 words total."
  • Letting markdown in. AI adds bold and headings by default, and in the review record they show up as stray symbols. Try: Add: "Plain text only, no bold, no headings."

What a strong prompt includes

  • States the exact rule
  • Lists only conflicts
  • Asks for a fix
  • Sets a word limit
  • Asks for plain text

Practice this now ↑

Related exercises