An audit can be considered as a project with an start date and end date. We might want to audit or certify multiple items using an audit. For example, in a Q1 audit you might want to certify, external partner identify as well as member of certain high risk management roles. These items are specified in one or more recertification policies. As a project might have multiple deliverables an audit can have multiple recertification policies associated with it. We can create recertification policies of different types in the EmpowerID system and these policies are reusable.
Account validity recertification policy is to certify whether an account should exist or not. For example, in a company there may be employees access recertification or review yearly. For the recertification, an audit is created, which generates business requests that are sent for approval. The engine bundles the recertification items into business requests as per the responsible party. For any item being recertified where its responsible party is null, it bundles them all into one business request where the subject of the request is the fall-back assignee. Recertification policies are policies that you add to audits to generate recertification review tasks for the access assignments given to people, roles, groups, and query-based collections.
...