Policy Enforcement

Overview

Detect and Mitigate Enterprise-Wide Policy Violations in Real Time
Proactively managing policy violations is critical to managing security and business risk. Compliance Manager takes a proactive, automated approach to policy enforcement, allowing business managers and IT to define and automatically scan for policy violations, across enterprise IT systems, and to respond appropriately.

Compliance Manager tracks the status of policy violations for each user and incorporates this information into the compliance dashboard, identity risk scores and certification reports. Managers can lower risk scores by revoking access that results in a policy violation or by allowing an exception.

Benefits

With IdentityIQ Policy Enforcement, enterprises can:

• Enforce Multiple Types of Policy across Enterprise Applications – Allows organizations to define, detect and remediate SoD policies for roles and entitlements, as well as account, risk and activity policies
• Proactively Identify Violations – Automatically scans and analyzes identity data across all compliance-relevant applications to quickly detect policy violations, enabling organizations to rapidly find and resolve policy exceptions
• Mitigate Violations in Real Time – Supports customization of how policy violations are handled once detected; for example, low-severity violations can be summarized in reports while high-severity alerts can trigger notifications to a manager for immediate remediation
• Use a Risk-Based Approach to Prioritize Violations – Assigns a risk score to indicate the level of risk associated with the violation of a defined policy
• Track and Report on Violations – Generates graphical reports based on policy scans, with violations summarized and grouped by application, department or geography
• Check Policy before Implementing Access Changes – Proactive policy checking and impact analysis ensures that inappropriate access privileges in violation of defined policies are not granted

Resources

• SailPoint IdentityIQ Product Overview – A high-level introduction to SailPoint IdentityIQ, a comprehensive identity governance solution that delivers risk-aware compliance management, integrated lifecycle management, identity intelligence, and user provisioning with a common framework for managing roles, risk and policy.
• IdentityIQ Compliance Manager Data Sheet – Provides a detailed look at the benefits, key capabilities and features for the compliance management component of SailPoint IdentityIQ offering automated access certifications and policy enforcement.
• Podcast: Identity Governance Satisfies Compliance, Personnel Management and Security Demands – Dana Gardner, principal analyst at Interarbor Solutions, talks about a serious and potentially catastrophic set of issues for many companies concerning security and risk aversion around personnel, applications, and IT systems. With SailPoint executives, he reviews how companies can more properly manage identity information and access rules for the users of applications and systems.
• White Paper: Effectively Managing Today's Compliance Challenges with Identity Governance – This paper examines the common regulatory requirements that companies face in order to manage information security risk, focusing on the key role played by identity governance in meeting those requirements. It provides recommendations on how to build a sustainable approach to compliance and reviews five guidelines for improving compliance efficiency and building risk management into the compliance process.
• Case Study: Stepping up Compliance Efforts while Enhancing Security for Intellectual Property – TEL U.S. Holdings (Tokyo Electron) wanted to streamline its manually-driven compliance processes, improve security and gain better visibility into and control over user access to reduce the risk of intellectual property (IP) theft. Within just two months, SailPoint IdentityIQ enabled them to take a more proactive approach to compliance and improve their overall governance posture.

Demo

Register to See IdentityIQ in Action

Please complete the questions below and someone will contact you soon to schedule an IdentityIQ demo. *Please note, fields marked with an asterisk (*) are required. First Name: * Last Name: * Title: * Company: * Email: * Phone: * (please use only numbers) What capabilities are you most interested in? (select all that apply, please hold down "ctrl" key when selecting multiple answers) Compliance management Access Certifications Policy Enforcement Provisioning Role Management Access request management Identity intelligence Auditing and reporting All of the above Other   * If your browser is set to accept cookies, you will be recognized on subsequent visits and immediately granted access to the SailPoint Resource Center.