The review of user access rights to see if they are proper and correspond to the organization's internal rules and compliance standards is known as an access recertification audit. An audit can be considered a project with a start and end date. We might want to audit or certify multiple items using an audit. For example, in a Q1 audit, we might want to certify an external partner and identify as well as a member of certain high-risk management roles. These items are specified in one or more recertification policies. EmpowerID maintains an audit trail of these access snapshots and the decisions made concerning the access. EmpowerID recertification audits can be scheduled to run periodically, such as on a quarterly or monthly basis, weekly, daily, or at will.
In EmpowerID, an audit is a logically named user-defined object for identifying or grouping recertification tasks and running the Recertification policies that generate them. After creating an audit, you can add one or more Recertification policies to it.
Create an audit
On the navbar, expand Compliance and select Recertification.
Select the Audits tab on the Recertification page and click the + icon to Create Audit.
In the Audit Details form that appears, enter the following information:
Name – Name of the audit
Display Name – Display Name of the audit
Creation Location – Click the Select a Location link and then search for and select the desired location
Description – Description of the audit
Started – Select the date you want the audit to start
Due Date – Select the date the audit completes
Audit Owner – Search for and select the person who is to be the audit owner
Do No Allow Delete – Select this option if you do not want to allow the audit to be deleted from the EmpowerID UI
Enabled – Select to enable the audit to run.
IsTemplate - Select this option to use this audit as a template for quickly creating other audits.
4. Optionally, enable or disable any of these settings:
Is Template – Select this option to use this audit as a template for quickly creating other audits. Selecting this checkbox will show another checkbox on the UI named “Enable Audit Creation on Schedule.”
Enable Audit Creation On Schedule - You need to select the dates and intervals on the Audit creation schedule and audit duration in days.
5. Click Save.
After creating an audit, you need to add at least one Recertification policy to the system to generate recertification tasks.