Respond to
your auditor’s requests
Automated IT General Controls (ITGCs) for logical access continuously detect anomalies in your company’s data, applications and infrastructure. The risk reduction and compliance goals associated with access rights are now more than ever within reach. Want to take the next step?
Take an automated and proactive approach to continuous monitoring.
1
Consolidate and correlate your data.
Whatever the source, including Active Directory, PAM, IAM, HR data, and business applications, correlate all the information you have and reconstruct the access rights chain.
2
Control your access rights.
Continuously detect compliance deviations from general regulatory requirements (ISO 27000, FISMA, HIPAA, SOX, SOC2, etc.) with over 150 automatically executed checkpoints.
3
Demonstrate compliance of your access rights.
Proactively correct gaps detected by continuous monitoring. Set up automated access rights and deviation reviews. Maintain proof of control, remediation and compensatory controls to demonstrate compliance in future audits.
4
Share the progress of your performed controls.
Build dashboards and reports to effectively communicate with asset owners, safety managers and auditors. Provide evidence of progress.
Prove to auditors that access rights are under control.
Take advantage of an agnostic model.
Determine who has access to what.
Correlate data and show chains of responsibility to verify that the access that has been granted is legitimate. Identify and document technical and service accounts while limiting the presence of orphaned accounts.
Rely on predefined controls.
Automatically run more than 150 checkpoints, including detection of orphaned accounts, accesses that have not been reviewed for more than a year, accounts that need to be deactivated due to people leaving and user accounts with too many access rights, etc.
Respond effectively to auditors.
Get continuous reporting capabilities and share them with resource, department and cross-functional managers. Involve them in review campaigns. Once completed, quickly and easily transmit all the necessary evidence to your auditors.
Be prepared to respond quickly to auditors.
To learn more…
article
Why do you need to use ITGCs?
Through the study and analysis of some real-life stories, discover why ITGCs are indispensable.
Article
The fundamentals of IT General Controls
Are you familiar with IT General Controls (ITGC)? Do you know why and how to run them?
Let’s figure it out together!
Infographic
The 10 best practices to perform your user access reviews
Discover the best practices to follow to ensure the compliance of your access rights.