Policy Enforcement

Overview

Violation Reporting [ view larger screenshot ]

Proactively Manage Enterprise-wide Access Privileges
Compliance IQ allows IT and business users to define and customize business rules and policies – such as separation of duty (SOD) policies. To add business context and simplify policy definition, Compliance IQ allows organizations to define policy against higher-level business roles as well as fine-grained entitlements. To automate detection, Compliance IQ automatically scans and analyzes identity data to uncover violations. If violations are detected, the application notifies key personnel or automatically initiates corrective actions.

To prevent violations from creeping back into the system, Compliance IQ proactively detects when new permissions will trigger a policy violation, and helps prevent risk from entering into production environments.

Capabilities

• Define Policy across Enterprise Applications – Define and enforce policies, including SoD, in accordance with internal governance, audit, and legal requirements across all critical application environments.
• Proactively Identify Violations – Automatically scans and analyzes identity data across all compliance-relevant applications to quickly detect policy violations, enabling organizations to rapidly find and resolve policy exceptions.
• Mitigate Violations in Real-Time – Organizations can customize how policy violations are handled once they are detected by scans. For example, lower severity violations can be summarized in reports, whereas high severity alerts can automatically trigger notifications to managers for immediate remediation.
• Check Policy before Implementing Access Changes – Proactive policy checking and impact analysis ensures that inappropriate access privileges in violation of defined policies are not granted.
• Track and Report on Violations – Graphical reports are generated based on policy scans, showing a summary of violations grouped by application, department, or geography.

Features

• Policy Creation – Defines rules and access policies in business-friendly language based on audit and legal requirements across all critical application environments.
• Separation-of-Duty Support – Facilitates compliance with enterprise-wide definition and enforcement of SoD policies.
• Automated Detection and Alerting – Proactively scans and analyzes identity data and notifies key personnel or automatically initiates remediation workflow when violations are detected.
• Impact Analysis – Prevents new violations with policy checks and impact analyses before new user access privileges are granted.
• Violation Management – Centralizes management of enterprise policy violations through an easy-to-navigate user interface.
• Risk-aware Policy Enforcement – Elevates identity risk scores for users who have policy violations that have not been resolved or allowed as an exception.

Resources

• Compliance IQ Product Brochure – A quick introduction to SailPoint Compliance IQ, an integrated solution that automates identity compliance controls, manages roles and analyzes identity risk.
• Compliance Mgmt Data Sheet – Outlines the key components and benefits of Compliance IQ's compliance management offering including access certification, policy enforcement, and activity monitoring.
• Policy Enforcement AAG – A thorough overview of how Compliance IQ defines and enforces business rules and policies to mitigate risk.
• Identity Compliance Assessment Tool – This interactive tool provides a baseline assessment of your organization's ability to manage identity compliance effectively and efficiently.

Demo

Register to See Compliance IQ in Action

Please complete the questions below and someone will contact you soon to schedule a Compliance IQ demo. *Please note, fields marked with an asterisk (*) are required. First Name: * Last Name: * Title: * Company: * Email: * Phone: * (please use only numbers) What capabilities are you most interested in? (select all that apply, please hold down "ctrl" key when selecting multiple answers) Access Certifications Role Management Policy Enforcement Activity Monitoring Risk Metrics and Analytics All of the Above   * If your browser is set to accept cookies, you will be recognized on subsequent visits and immediately granted access to the SailPoint Resource Center.