How to Build IT Accountability with SoD (ISO 27001 Control 5.3)

https://is1-ssl.mzstatic.com/image/thumb/Podcasts116/v4/2f/d0/65/2fd065cb-5a07-ed13-2bef-5f20237835d8/mza_16436592847458646362.jpg/600x600bb.jpg

The ITSM Practice: Elevating ITSM and IT Security Knowledge

Luigi Ferri

121 episodes

1 week ago

Join Luigi Ferri, an experienced ITSM & IT Security Professional, in 'The ITSM Practice.' Explore IT Service Management and IT Security, uncovering innovations and best practices with insights from leading organizations like Volkswagen Financial Services, Vodafone, and more. Each episode offers practical guides and expert discussions for learning and growth. Ideal for all ITSM and IT Security Professionals! Stay Connected: LinkedIn: https://www.linkedin.com/in/theitsmpractice/ Youtube: https://www.youtube.com/@theitsmpractice Website: http://www.theitsmpractice.com

Technology

RSS

All content for The ITSM Practice: Elevating ITSM and IT Security Knowledge is the property of Luigi Ferri and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Technology

https://d3t3ozftmdmh3i.cloudfront.net/staging/podcast_uploaded_nologo/39791737/39791737-1703369682997-6c8aee26bd3b2.jpg

How to Build IT Accountability with SoD (ISO 27001 Control 5.3)

The ITSM Practice: Elevating ITSM and IT Security Knowledge

10 minutes 31 seconds

1 month ago

How to Build IT Accountability with SoD (ISO 27001 Control 5.3)

In this episode of The ITSM Practice, Luigi Ferri explores ISO/IEC 27001:2022 Control 5.3 – Segregation of Duties (SoD). Learn how to reduce risk, design accountability, and strengthen your ISMS with actionable SoD strategies, especially in ITIL 4 environments. Master RBAC, role clarity, and audit readiness to build trust into your IT processes by design.

In this episode, we answer to:

How does ISO 27001:2022 Control 5.3 define and implement Segregation of Duties?

What are effective ways to apply RBAC and SoD in small or resource-limited teams?

How can organizations monitor, log, and prove SoD compliance for audits?

Resources Mentioned in this Episode:

ISMS-Online, article "ISO 27001:2022 Annex A 5.3 – Segregation of duties", link https://de.isms.online/iso-27001/annex-a/5-3-segregation-of-duties-2022/

Morgan Hill website, template "ISO/IEC 27002:2022 | 5.3 - Segregation of Duties Policy Template", link https://morganhillcg.com/blog/item/iso-iec-27002-2022-5-3-segregation-of-duties-policy-template-2

HighTable, article "The Ultimate Guide to ISO 27001:2022 Clause 5.3: Organisational Roles, Responsibilities and Authorities", link https://hightable.io/iso-27001-clause-5-3-organisational-roles-responsibilities-and-authorities/

Connect with me on:

LinkedIn: https://www.linkedin.com/in/theitsmpractice/

Website: http://www.theitsmpractice.com

And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.

Credits:

Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya