Identify tasks, assign roles, and enforce policies.

• A. Federation solutions
• B. Data classification policy
• C. Future scalability requirements
• D. Implementing SoD

Answer: (D)

Separation of Duties is the practice of dividing tasks among different people or roles so that no single individual can control all aspects of a critical process. By clearly identifying the tasks, assigning each to a distinct role, and enforcing policies that prevent conflicts, you create checks and balances that reduce the risk of fraud or error. In a CIAM context, this means separating duties like creating or modifying identities, granting permissions, approving privileged access, and auditing changes, with policy enforcement ensuring these steps aren’t performed by the same person. The other options don’t fit because federation solutions focus on cross-domain authentication and SSO, data classification policy deals with labeling and handling data, and future scalability requirements address growth and capacity planning. Implementing SoD directly matches the need to identify tasks, assign roles, and enforce policies.