The review and certification of user access privileges is a key component of identity auditing and compliance. In fact, understanding and validating that access privileges align with a user's job function is a critical requirement of the most significant regulatory requirements, including Sarbanes-Oxley, HIPAA and others that focus on protecting highly-sensitive data. By regularly validating the appropriateness of user access privileges, organizations can effectively reduce their chances of non-compliance and improve their overall risk posture.

Compliance IQ access certification improves the operational efficiency and accuracy of the certification process, ensuring the goals of corporate accountability and compliance are met.

Overview
Capabilities
Features
Resources
Demo

Overview

Reviewer Report

[ view larger screenshot ]

Automate and Improve Compliance Effectiveness
Compliance IQ automates the access certification process, establishing repeatable practices that help ensure a consistent, reliable, and easier to manage certification effort. To improve accuracy of the entire certification process, Compliance IQ delivers customizable certification reports for both business and technical users. Annotating reports with descriptive business language and other helpful information to highlight changes and flag anomalies where they appear makes it easy for reviewers to grasp complex data and take corrective actions.

Performing regular access certifications is a key compliance process for managing identity risk. Compliance IQ tracks the status of all user certifications and elevates user risk scores who have not been certified within a specified timeframe. Managers can easily search and report on high-risk users, then perform a one-time certification based on that data to revalidate access and reduce risk.

Capabilities

Drive Automated Review Cycles and Personalized Reports – Using automated, configurable workflow capabilities, Compliance IQ aggregates entitlement and role data for each user and routes certification requests to the appropriate owner for review.
Present Data in Business-Friendly Language – Displays role and entitlement data in clear business context, freeing up hours of lost productivity spent by managers deciphering arcane technical data.
Enforce a Closed Loop Remediation Process – Ensures continuous compliance by sending automatic revocation requests to user provisioning systems or help desk systems and validating that changes occurred.
Track Reviewer Progress and Actions – Tracks the percentage of certifications completed by specific managers, departments, and the entire company. An intuitive progress chart allows users to drill-down to an individual access certification report.
Archive Reports – Archives all current and historical entitlement records and activity logs. The centralized, secure repository enables evidence gathering for forensic analysis, internal, and external audits.

Features

Consolidated Certification Reports – Centralize access data, including entitlements, roles and policy violations, across the organization and format it into easy-to-read certification reports
Automated Workflow – Automates certification process for routing certification requests, including approvals, delegations and remediation requests
Business-oriented Certification Process – Enables organization to distribute certification decisions to business users by simplifying the presentation of complex IT access data
Closed-loop Remediation – Ensures continuous compliance by sending automatic revocation requests to an automated or manual user provisioning system and validating changes occurred
Risk-aware Certifications – Elevates identity risk scores for users who have not had timely certification reviews

Resources

Access Cert At-A-Glance – An in-depth look at how Compliance IQ streamlines and automates the review and approval of user access privileges.
Automated Access Certification ROI Calculator – This ROI calculator will help you to quickly estimate how much money your organization can save by automating the access certification and attestation process.
Compliance Mgmt Data Sheet – Outlines the key components and benefits of Compliance IQ's compliance management offering including access certification, policy enforcement, and activity monitoring.

Demo

Please complete the questions below and someone will contact you soon to schedule a Compliance IQ demo.

*Please note, fields marked with an asterisk (*) are required.

First Name:	*
Last Name:	*
Title:	*
Company:	*
Email:	*
Phone:	* (please use only numbers)
What capabilities are you most interested in? (select all that apply, please hold down "ctrl" key when selecting multiple answers)

* If your browser is set to accept cookies, you will be recognized on subsequent visits and immediately granted access to the SailPoint Resource Center.