A recertification policy contains actions to ensure that users submit an assurance that they have a genuine, continuous need for a particular resource or membership. As a project might have multiple deliverables, a recertification audit can have multiple recertification policies associated with it. We can create recertification policies of different types in the EmpowerID system, which are reusable. For example, we want to certify external partners and members of certain high-risk management roles in an audit. These items are specified in one or more recertification policies and later added to the same audit.
Recertification Policies are snapshots of data that reveal the access to resources granted to people and to roles, the assignments of people to roles, and the security assignments that have been made against protected resources. These snapshots are routed for review to authorized personnel such as managers, role owners, or data owners. The review process allows the reviewer to verify the access and certify whether it is valid. Internal processes can use this data to remediate and rectify exceptions or certify the exceptions as permitted.
Please follow the instructions below to create a recertification policy
Create a Recertification Policy
Log in to the EmpowerID.
On the navbar, expand Compliance and select Recertification.
On the Recertification page, select the Recertification Policies tab. Click + icon to create a new recertification policy.
In the Policy Details form that appears, provide the necessary details and click Save,
Click the Policy Type drop-down and select from the options. EmpowerID provides different policy types that define data snapshots for a particular resource type. More information about the policy types is covered here in the doc Recertification Policy Types.
Fill in the Name, Display Name, and Description fields.
Select Enabled to enable the policy.
After EmpowerID creates the policy, the view one page appears where you can configure Targets of the Recertification and Item Type Scope (Data), which is important to complete the configuration of the policy.