Management Role Validity Type Recertification Policy

An audit can be considered as a project with a start date and end date. We might want to audit or certify multiple items using an audit. For example, in a Q1 audit you might want to certify, an external partner, identify as well as a member of certain high-risk management roles. These items are specified in one or more recertification policies. As a project might have multiple deliverables an audit can have multiple recertification policies associated with it. We can create recertification policies of different types in the EmpowerID system, and these policies are reusable.

Recertification policies are policies that you add to audits to generate recertification review tasks for the access assignments given to people, roles, groups, and Query-Based collections. Management role validity recertification policy is to certify the current validity of a management role. This recertification determines if the management role should exist, be "disabled,” or deleted. In this post, we will create a management role validity type recertification policy and add a target to it.

Pre-requisite for recertification policies, audit compilation and fulfilment of business requests.

Create a Management Role Validity Type Recertification Policy

1. Log in to the EmpowerID web application as an auditor or other person with the ability to configure audits.

2. On the navbar, expand Compliance and select Recertification.

3. On the Recertification page, select the Recertification Policies tab.
   

   

4. Then click + icon to create a new Recertification Policy

5. The policy details page opens up.

6. Select policy type as ‘Management Role Validity.’ Enter any name, display name, and description.

7. Click on Save.
   

   

   
   Add the target type “Location” to the policy created

8. Click on the '+' icon at the bottom of the policy details page to add the target.

9. The attestation policy target section opens up.

10. Under the type dropdown, select ‘Location.’

11. Under the select a location dropdown, search for a location and select it.

12. Click on Save.
    

    

    
    Add the target type “Set Group” to the policy created

13. Click on the '+' icon at the bottom of the policy details page to add the target.

14. The attestation policy target section opens up.

15. Under the type dropdown, select ‘Set Group.’

16. Type a query name under “enter a query-based collection name”.

17. Click on Save.
    

    

    
    Add the target type “Management Role” to the policy created

18. Click on the '+' icon at the bottom of the policy details page to add the target

19. The attestation policy target section opens up.

20. Under the type dropdown, select ‘Management Role.’

21. Under the enter a management role name dropdown, please search for a management role and select it.

22. Click on Save.
    

    

    
    Add the target type “Management Role” to the policy created

23. Click on the '+' icon at the bottom of the policy details page to add the target

24. The attestation policy target section opens up.

25. Under the type dropdown, select ‘Management Role Definition.’

26. Under the enter a management role definition name dropdown, please search for a management role and select it.

27. Click on Save.
    

    

28. The management role validity type recertification policy type with various target types is created as below.
    

    

Next Steps

• Audit with Management Role Validity Recertification Policy