For certain sensitive tasks, the duties should be segregated so that no user has access to both aspects of the task..