Audit and recertification policies are actionable snapshots of data that reveal the access to resources granted to people and roles, the assignments of people to roles, and the security assignments that have been made against protected resources like Exchange mailboxes, applications, and groups. EmpowerID Separation of Duties (SoD) Policies are policies that allow you to implement rules that raise alerts when combinations of resource assignments violate your organization's security protocols. When a Recertification or SoD policy runs, EmpowerID creates review tasks and routes those tasks to the appropriate people, where those tasks can be appropriately dealt with. The topics in this section show you how to set up these policiesAccess recertification is an information technology control that includes reviewing user access rights to see if they are proper and comply with the company's internal rules and laws. Recertification is a part of an organization’s governance risk and compliance activity. Recertification or attestation are different terms for the same thing. GRC (governance, risk, and compliance) is a collection of rules and procedures that enable firms to achieve their business goals, deal with uncertainty, and behave with integrity. Depending upon the size of the company and whether they are public or non-public, and the industry they are in, such as banking or finance, etc., many companies are required by law to perform recertification or attestation of access.

To maintain compliance, your users need to have the appropriate access for their roles. With the considerable number of systems and apps available, this is becoming more complicated and challenging. EmpowerID provides you with the capability to not only manage your access certification and governance, but also to audit your critical systems and users, recertify them, provide revocation fulfillment, and much more.

...

...