Best practices for continuous certification
Do you have active directory accounts that haven’t been used in more than a year? Do the accounts reflect the individual’s current roles and responsibilities? Is your company ready to demonstrate compliance with industry regulations?
With technology moving faster than company processes, an effective IAM program needs to include detective controls to ensure that subsequent access changes remain aligned with the users’ job functions and responsibilities. This can be accomplishing using the Attestation or Certification feature included in most of the Identity Management Solutions. For this post, we will use the term certification, but it is worth mentioning that some tools use the term attestation instead.
Read more at – Best practices for continuous certification