OM-IND-0013: Revocations per Line Manager (Indicator - IAM)
ID | OM-IND-0013 |
---|---|
Process | |
Indicator | Revocations per Line Manager |
Version |
|
Formula | Given that:
The indicator is composed of the following series: No Recert Recert 0 Recert Normal Recert High |
Parameters | We recommend to initially set and adapt it if necessary. |
Rationale | The objective of this indicator is to measure the effectiveness of the LM Recertification process, that is to say how tightly line managers control discretionary access rights and roles. No Recert shows the ratio of line managers who failed to complete their recertification duty. This must be maintained as low as possible. Recert 0 shows the ratio of line managers who completed their recertification duty but revoked 0 access rights. Two distinct causes may explain this result: 1) access rights were optimal and did not require any change or 2) the line manager ticked the boxes without due care. Further inquiry may be required to distinguish between the two. Recert Normal shows the ratio of line managers who completed their recertification duty and revoked a number of access rights that is within expectations. Recert High shows the ratio of line managers who completed their recertification duty and revoked an abnormally high number of access rights. A one time high may be caused by changes in the organization. But if the situation persists, this may reflect an inefficient setup where line managers must continuously adapt access rights. A root cause may be that RBAC is not implemented or improperly implemented. |
Benchmarking | This indicator is adequate for benchmarking given comparable recertification campaign scopes, campaign frequency and parameter value. |
Stakeholders | |
Scopes | This indicator may be specialized for different scopes depending on recertification campaigns. Typical scopes are:
|
Negative Effects |
|
Data Sources |
|
Typical Frequency | Same frequency than recertification campaigns. Often quarterly, half-yearly or annually. |
See Also |
Follow us on LinkedIn | Discuss on Slack | Support us with Patreon | Sign-up for a free membership.
This wiki is owned by Open Measure, a non-profit association. The original content we publish is licensed under a Creative Commons Attribution 4.0 International License.