Prevents conflicts of interest in access management.

• A. Data classification policy
• B. Importance of SoD in IAM
• C. SoD in log management
• D. Implementing SoD

Answer: (B)

Separating duties in access management is about dividing responsibilities so no single person can control all steps of a critical process. This prevents conflicts of interest and reduces the risk of fraud or abuse because approvals, provisioning, and reviews are handled by different roles. The best choice directly addresses why this separation matters inside IAM and how it mitigates conflicts.

Data classification policy focuses on labeling data by sensitivity, not on how access rights are divided. SoD in log management deals with duties around logging and monitoring, which is related but not the primary mechanism for preventing conflicts in access management. Implementing SoD is the action of putting the controls in place, but the question is about why SoD matters in IAM, which is captured by the emphasis on its importance.