As a response to audit findings and the Sarbanes Oxley legislation around Segregation of Duties issues we have implemented the Virsa VRAT tool. Does anyone have experience with this tool or with Virsa? My specific question is around the use of their (VIRSA's) Segreation of Duties rules. We are using the SODs that Virsa provided but we are finding many that don't really seem to pose the risk that Virsa has described with the way the rules are currently written and I am concerned that we are creating undo work for ourselves by trying to mitigate all these SOD rules, but then again, if the rules are right and we ignore them, we are putting the company at risk. Just wondering if anyone has any experience in this area.