In Part I of this article, we explored an iterative, agile approach to Segregation of Duty (SoD) compliance, beginning with goals and objectives. Now comes time to design a methodology, complete with roles-based SoD rules unique to your company, and to implement that methodology. If done well, this methodology ensures SoD compliance now and years from now, as segregation of duty becomes standard operating procedure (SOP).