Risk Scorecards

Overview

Quantify Risk and Prioritize Compliance Efforts
With Compliance IQ risk metrics, organizations can focus their risk management efforts strategically, quantify and demonstrate enhanced security and reduced risk to the business and track performance over time. The risk scorecard is a graphical risk-management scoring system that applies analytics to identity data and IT resources in order to pinpoint areas of greatest risk, enabling organizations to focus their compliance efforts strategically.

Compliance IQ assesses security risk by user and by resource across the IT environment. Using configurable algorithms, unique identity risk score are assigned for each person who has access to critical systems and applications. Scores are based on multiple factors – everything from basic profile and job function data to assessment of complex user privilege information mined from the IT environment. At the resource level, Compliance IQ calculates risk scores for resources based on factors such as orphaned, dormant or service accounts. Risk scores are updated regularly as new information is acquired through Compliance IQ.

With Compliance IQ Risk Management, organizations can focus their risk management efforts more strategically, track progress over time and provide quantifiable proof of enhanced security and reduced risk to the business.

Capabilities

• Prioritize Compliance Efforts with Risk Scoring – Compliance IQ calculates and assigns a unique identity risk score for each person who has access to critical systems and applications and can also assign scores to application and system resources. Managers can target the highest-risk users or systems first, improving the effectiveness of controls of their departments and, ultimately, the security and compliance of the business.
• Remediate Risk – Compliance IQ provides the ability to immediately take action to mitigate risk or remediate access violations for a single user or group of users.
• Demonstrate Performance Improvements over Time – The risk metrics available from Compliance IQ enable organizations to focus their compliance and risk management efforts strategically, while also allowing them to quantify and demonstrate enhanced security and reduced risk to the business and track performance over time.

Features

• Identity Risk Scorecards – Highlight key identity risk factors for users across the enterprise to streamline compliance activities and improve overall security
• Resource Risk Scorecards – Automate the identity risk assessment for enterprise systems and target applications to better focus compliance efforts
• Configurable Risk Models – Customize the identity and resource risk models to suit an organization's unique needs and environment
• Integration with Compliance Controls – Links integrated risk metrics with individual compliance controls to provide better transparency to critical risk information throughout the organization

Resources

• Compliance IQ Product Brochure – A quick introduction to SailPoint Compliance IQ, an integrated solution that automates identity compliance controls, manages roles and analyzes identity risk.
• Identity Risk Management At-A-Glance – A detailed discussion of how Compliance IQ helps to focus and prioritize compliance efforts.
• Webcast: New Challenges for Identity Management: Assessing Identity Risk – Mark McClain, Founder and CEO of SailPoint presents an overview of the challenges and drivers that are leading to emerging technology, identity risk management. You'll hear what the barriers to compliance are, and how an identity risk management solution can help. 40 minutes.

Demo