Many of our customers already have regular internal or external compliance audits for Identity and Access Management such as a yearly or quarterly review processes. The auditors normally ask for evidence that all regulatory and company internal standards are met in regard to Identity and Access Management; principles like “least privilege access rights” should be implemented and that all access rights should be closed when an employee leaves. The responsibility to confirm that “least privilege access rights”
standards are met normally rests with line management. Line managers are already under increasing pressure from legislations and regulations like: · EU/US Data Protection and Leakages regulations (GDPR / AB375 / SB1386) · NIST Cyber Security Framework · PCI Compliance · ISO 27k compliance · BCBS 239 iShepherd TRM360© (Transparent Risk Monitor 360) supports these different legislations and visualises compliance with both internal and regulatory compliance standards. One easy to understand dashboard gives a line manager full insight into the risk-level of his team and which non-standard access rights are granted. As an example: within the Joiner-Mover-Leaver processes roften access rights are not closed when employees leave their position, or even worse, the company. iShepherd visualises all access rights and risk levels within teams or organisational units and gives line-managers, auditors and senior-management clear insights into which rights require (manual) review and where a clean-up is needed. Full risk status and recommendation integration in existing Access Right Approval Processes is possible as iShepherd TRM360© is built based on highly secure but open standards – which allows flexible integration. iShepherd TRM360© allows you to save and certify snapshots of data for compliance and audit purposes. |