Enhancement: Data Access Security now supports Access Certification!

Data Access Security now provides organizations with the capability to review and certify access to sensitive, regulated, and critical data. This is to ensure compliance with regulation and that the proper access is provisioned to the right people at the right time.
Data Access Security access certifications allow identifying over-privileged access for revocation, thereby enhancing the overall security posture of organizations. Smart review processes dynamically assign reviewers based on data and identity context, leveraging SailPoint’s comprehensive visibility and the full capabilities of its platform.

What is the Problem?

• Periodic access certification is mandated by regulation to enhance data security, risk mitigation, privacy, and overall compliance within organizations. Organizations are not only required to go through the periodical certification process but also provide evidence of completion to the regulator.
• Highly distributed organizational data resources, which makes it difficult to map and protect. This is a pain point especially when it comes to storing and protecting sensitive data.
• Different users have different access permissions, either inherited due to their role and group membership, or directly assigned.
• Access certification reviewers have limited information to base their certification decision on. Data Access Security provides additional information to support and justify their decisions.

What is the Solution?

Incorporating the access certification feature in SailPoint’s Data Access Security leverages DAS’s extensive capabilities for data resources exploration, together with DAS’s ability to get a complete picture of the organization’s accounts and access privileges, to create a synergy between these two capabilities in regards to unstructured data access certification.

Features include:

• Certification of access to unstructured data resources
• Select the certification scope - the certified access accounts and resources
• Data Owner and Direct Review Processes - Dynamically calculated based on Identity and Data Context
• Provide the reviewers with data to support their decision
• Bulk decision capabilities
• Review Reassignment
• Edit and manage existing campaigns
• A review process, allowing rejection or approval of access
• Certification reporting capabilities
• Split the review between multiple reviewers

Who is affected?

SailPoint’s ISC customers can now extend their governance processes to incorporate unstructured data, and ensure they are compliant with the relevant regulation when it comes to data, in the same way they can with applications.
Compliance Managers and IGA Admins can now apply governance controls with the same rigor and greater granularity to what they do with applications and structured sources.

Important Dates

The Data Access Certification Access Certification capability is generally available to all Data Access Security customers in all regions starting March 31st 2024.

Customer Communications

Documentation

What is Next Up?

Additional features and enhancements to be introduced in Q2 '24.