Term Kind Topic What it is
Irreversible Operation Guard Soft Delete Window, Two-Person Destructive Control pattern Segregation of Duties The set of design choices that make a destructive action recoverable by default - a delay before permanence, a type check on the target, and a second approver for bulk effects.
Partial Deployment Verification Artefact Completeness Check, Fleet Convergence Verification practice Segregation of Duties Machine confirmation that every target in a fleet is running the intended artefact, independently checked, so that an incomplete rollout cannot present itself as a finished one.
Segregation of Duties SoD, Separation of Duties concept Segregation of Duties Ensuring no single individual can both initiate and approve a sensitive action, so that fraud or error requires collusion.
Single-Credential Test Can One Credential Do Both, Segregation Reality Check practice Segregation of Duties Asking whether any single credential - including a database administrator, a root account or a deployment pipeline - can both initiate and approve a movement of value, which distinguishes a real segregation co…
Toxic Combination concept Segregation of Duties A pair of permissions that is acceptable individually and dangerous together, which is what a segregation-of-duties model exists to identify.