Reviewing entitlements

In many cases, government regulations and security policies require organizations to report on the access privileges that users have to systems and data, and also to promptly remove privileges that are no longer appropriate. This process is known as access certification.

Bravura Security Fabric ’s certification feature ensures that organizations comply with these regulations by periodically requiring accountable personnel to review user profiles, login accounts, and security group memberships.

Certification is the process by which you review the login IDs, personal information, and group memberships within one or more resources, which can include applications or groups. You identify access privileges that are appropriate and remove those that aren’t, and sign a statement that indicates that the review has been completed.

A Bravura Security Fabric administrator can define and start a certification campaign, choosing which resources to include, user information to be included, and the reviewers who will participate in the review. As a reviewer you may be asked to review your subordinates, all users for the resources selected, or a segment of the user population.

The following sections show you how to: