The review of user access rights to see if they are proper and correspond to the organization's internal rules and compliance standards is known as an access recertification audit. The audit process first collects information from organizational systems, such as IT and business applications. The information is presented in an informative way so auditors can easily see who has access to what privileges and take action for any unauthorized accesses/privileges. EmpowerID maintains an audit trail of these access snapshots and the decisions made concerning the access. In EmpowerID, an audit is a logically named user-defined object for identifying or grouping business requests and running the Recertification policies that generate them. EmpowerID recertification audits can be scheduled to run periodically, such as on a quarterly or monthly basis, weekly, daily, or at will.
You might want to audit or certify multiple items using an audit. For example, in a Q1 audit, we would want to certify an external partner and identify as well as a member of certain high-risk management roles. These items are specified in one or more recertification policies.
Create an audit
On the navbar, expand Compliance and select Recertification.
Select the Audits tab on the Recertification page and click the + icon to create an Audit.
In the Audit Details form that appears, enter the following information:
Name – Name of the Audit
Display Name – Display Name of the Audit
Creation Location – Click the Select a Location link and then search for and select the desired location
Description – Description of the Audit
Started – Select the date you want the Audit to start
Due Date – Select the date the Audit completes
Audit Owner – Search for and select the person who is to be the audit owner
Do No Allow Delete – Select this option if you do not want to allow the Audit to be deleted from the EmpowerID UI.
Enabled – Select to enable the Audit to run.
IsTemplate - Select this option to use this Audit as a template for quickly creating other audits.
Optionally, enable or disable any of these settings:
Is Template – Select this option to use this Audit as a template for quickly creating other audits. Selecting this checkbox will show another checkbox on the UI named "Enable Audit Creation on Schedule."
Enable "Audit Creation On Schedule - You need to select the dates and intervals on the Audit creation schedule and audit duration in days.
5. Click Save.
After creating an audit, you need to add at least one Recertification policy to the system to generate recertification tasks.