Over time, users tend to collect access rights. Periodic review prevents users from acquiring access not necessary for their jobs, which may be abused.

Access certification promotes accountability through explicit management review and sign-off of user access rights. Regulations such as Sarbanes-Oxley require that companies periodically review all users' access rights and certify these as correct.

Many companies take a low-tech approach to access certification by passing around spreadsheets in email. But Excel doesn't scale well and email is a poor solution for workflow, as well as insecure! IDEAS provides a true enterprise solution.

IDEAS drives access certification with scalable workflow, automated certification schedules, and an access review dashboard for business managers. IDEAS entitlement repository provides all the information for reviewing access rights and auditing authorization processes.

Review policies must be flexible. IDEAS may automatically trigger reviews under specific conditions, such as when a user is assigned a sensitive role, or has a large number of entitlements. Reviews may be scheduled, triggered, or launched manually.

Finally, IDEAS provides complete report and audit facilities to query compiled certification data and generate structured reports.

Benefits:

• Reduce the risk of fraud and unintended access
• Reduce the cost of audits and regulatory compliance
• Promote management accountability for the authorization process

Related Products:

• Access Governance Core