Is this a valid statement regarding Identity Security Cloud (ISC) policies?

This statement correctly describes the purpose of Separation of Duties (SoD) policies. In identity governance, a toxic combination is a set of access privileges that becomes excessively risky when possessed by the same identity. A typical example would be combining permission to create a supplier with permission to approve payments to that supplier. Either permission may be legitimate independently, while the combined privileges create an unacceptable control conflict.

Identity Security Cloud implements SoD by allowing administrators to construct policies containing conflicting sets of access. Human identities possessing access from both sides of the defined conflict can generate policy violations that administrators and designated violation owners can investigate, remediate, or mitigate. SailPoint describes SoD as an internal control that provides visibility into risky access combinations and helps organizations identify where policy violations exist.

Therefore, SoD policies are specifically designed to identify and govern the toxic combinations of privileges described in the statement.

Study Guide Reference: Supporting Governance — Separation of Duties, Conflicting Access, Toxic Combinations and SoD Policy Violations.

===============