Separation of Duties

Separation of duties means dividing sensitive work among different people so that no single person controls the entire process. In examination administration, this internal control separates responsibilities such as preparing questions, accessing confidential papers, distributing them and approving results, making unauthorised action harder to carry out and conceal.

How dividing responsibilities reduces fraud risk

The central principle is to separate incompatible duties, particularly authorisation, custody, execution and verification. An official who performs a sensitive task should not also be its only checker.

• Dividing control reduces the opportunity for one insider to obtain confidential material, misuse it and suppress evidence without encountering another responsible official.
• Independent verification can expose discrepancies between what was authorised, what was done and what was recorded.
• Clear allocation of responsibility creates accountability, making it easier to identify who approved, accessed or transferred sensitive material.

Applying the principle across the examination cycle

Responsibilities should be divided at critical handovers without unnecessarily widening access to confidential material. Least-privilege access complements separation of duties: each person receives only the access needed for their assigned task.

• Question preparation and final paper selection can be assigned separately, so that contributing questions does not automatically reveal the final examination paper.
• Custody and release of examination material should involve distinct responsibilities, with dual authorisation for especially sensitive actions.
• Dispatch and receipt should be independently recorded and reconciled, allowing missing packages or unauthorised transfers to be investigated.
• Marks entry and approval of corrections or final results should be independently checked, reducing opportunities for concealed manipulation.

Conditions for an effective safeguard

Separation of duties reduces risk; it does not eliminate it. Collusion between officials or an unchecked override by a powerful administrator can defeat the arrangement.

• Controls must operate in practice: assigning different designations is insufficient if officials share passwords or one person effectively controls all approvals.
• Access restrictions and audit trails should support the division of responsibilities by recording sensitive actions for independent review.
• Where staffing limits full separation, documented supervisory checks and independent reconciliation can provide compensating controls.
• The arrangement should form part of wider examination security, including secure custody, trained personnel and procedures for investigating suspected breaches.