Audit and recertification policies are actionable snapshots of data that reveal the access to resources granted to people and roles, the assignments of people to roles, and the security assignments that have been made against protected resources like Exchange mailboxes, applications, and groups. When an audit runs, EmpowerID creates review tasks and routes those tasks to the appropriate people, where they can be appropriately dealt with. The topics in this section show you how to set up these policies.