The organization implements separation of duties through assigned information system access authorizations.