New Capability: Data Access Security Certifications Now Support Manager/Entitlement Owner Review

New Capability Overview:

We are happy to announce Data Access Security now supports the assignment of certification campaigns to managers' and entitlement owners' review.

Data Access Certification campaigns enable admins and compliance managers to easily identify and quickly certify access to the org’s sensitive data assets and regulated information.

The Manager/Entitlement Owner hybrid review process allows campaign creators to create and launch certification campaigns using customizable identities, entitlements, permissions and data classification parameters, set the campaign scope and include additional attributes in the campaign information, and assign the review to the reviewed identities' managers and entitlements' owners.

Once the campaign is launched, the reviewers can review users' existing access privileges to the organization’s unstructured data resources, and decide to approve or reject the access based on the information given, according to its alignment with organizational policies and security standards.

It is available in Data Access Security under the ‘Compliance’ tab.

The Problem:

Making the certification decision whether access should be approved or not, largely depends on understanding the reviewed identity / entitlement context and access needs.

The Solution:

Assigning the review to the identity’s manager, or to the entitlement’s owner, bridges the context gap, and makes sure the person reviewing the access rights is the person who is also most informed of the identity or entitlement access needs.
For this reason, the Manager / Entitlement Owner review process is the most common review process for certifying identities and entitlements access.

Value to Users:

• Getting the people that are most familiar with Identity / Entitlement to make the governance decision.
• Easily assigning the certification campaign to the identities managers and entitlements owner in one campaign, without having to create different campaigns and use manual assignment.
• Avoid rubber stamping and support informed decisions to follow compliance requirements and avoid non-compliance fines
• Simpler and quicker reviews, as informed certification decisions are quicker to make.
• Monitor and control access privileges to the org’s resources
  
  Who is Affected:
  1. Compliance Managers will find it easier to adhere to compliance certification requirements
  2. Security teams get a tool to mitigate security risks of unnecessary access, and minimize the organization’s vulnerabilities.
• Is Action Required: No required action to use this feature. General Availability: The Manager/Entitlement Owner certification review will generally availability starting June 16th, 2024.