Patent ID: 7941336

Claim:
A method of performing a segregation of duties analysis on a back office software system that divides an enterprise function into a plurality of different activities and enables assignment of each activity to one or more security system entities authorized to execute that activity, the method comprising: using an enterprise resource planning software module on a computer to assign activities to security system entities; using a segregation-of-duties software module that interacts with the enterprise resource planning module to select activities of the enterprise function that are to preferably be kept separate; using the segregation-of-duties software module to identify security system entities having authorization to perform each of the selected activities of the enterprise function; and using the segregation-of-duties software module to analyze the security system entities and activities assigned by the enterprise resource planning software module to graphically display each of the selected activities of the enterprise function as a contour that represents that selected activity; wherein the segregation-of-duties software module graphically displays at least some of the contours as intersecting other contours representing other selected activities of the enterprise function to form multiply intersecting, dually intersecting, and non-intersecting regions, wherein the display of the contours form a Euler diagram; displaying in association with each region formed by the intersection of contours an indication of a quantity of identified security system entities that have authorization to perform all selected activities represented by that region, but which do not have authorization to perform any selected activities not represented by that region; and wherein the segregation-of-duties software module marks the regions in a manner that visually differentiates between multiply intersecting, dually intersecting, and non-intersecting regions, wherein the regions are marked according to the number of contours in which they are contained.