Access Compliance Management

One of the most important areas of risk management for many organizations is using compliance management controls to ensure that only the right people have the right access to information and are doing the right things with it. As sensitive consumer and corporate information becomes more available in digital formats, access compliance enables organizations to protect sensitive data from unauthorized access, as required by government and industry regulations, such as Sarbanes-Oxley, HIPAA, GLB, PCI DSS, and other internal & external requirements.

Access compliance management consists of:

• Defining policies concerning appropriate access rights that are aligned with corporate goals, industry requirements or government regulations
• Evaluating existing access rights and comparing them with policy
• Identifying users whose access rights are inconsistent with policy
• Taking remedial action to modify or remove access rights
• Reporting to security, internal or external auditors and other corporate or regulatory stakeholders that access rights are consistent with  policy
• Delivering employee training on security policy and mandating compliance before enabling access

Access compliance governs who has access to what, and when, and is often difficult to deploy without automation. Courion’s compliance management solutions enhance risk management by allowing business managers to examine user access rights, evaluate how they compare against policy and quickly take corrective action. Leveraging the operational expertise of business managers ensures sound business management and stronger compliance with regulatory requirements.

Courion’s access compliance management solutions:

• Business managers verify who has access to what and when
• Compare user access rights against policy and operational knowledge
• Automate remediation and corrective action.
• Reduce the cost and effort of validation and reporting on access policy

Access Compliance Solutions

ComplianceCourier, Courion's user access attestation and compliance software solution, enables business managers to periodically review and verify employee access rights. The ability to meet increased compliance requirements has tangible top and bottom-line implications across almost all industries.

Efforts at achieving compliance without automation can increase your cost of operations due to heightened security and time-consuming manual procedures. ComplianceCourier's access, audit and policy compliance software automates user resource analysis management, which improves compliance, while simultaneously reducing operational costs, by slashing the time and effort required to collect, analyze and report on compliance with policy.

ComplianceCourier also enforces policy training initiatives and can block access to critical applications until users have successfully completed policy awareness tests.

Access Policy Violations

An important aspect of compliance management is to check for policy violations, such as over-provisioning and segregation of duties.

The principle of least privilege states that users should have as few privileges as possible, consistent with their business function. Over-provisioned users who have more access rights than they require, represent a level of risk, particularly if they have unnecessary access to sensitive applications or data. ComplianceCourier helps business managers apply operational expertise and policy definitions to evaluate the appropriate level of access rights and remediate user access rights that exceed what are required for optimal efficiency and effectiveness.

Discovering potential segregation of duties violations is particularly critical in environments where users perform multiple roles or where user roles change on a frequent basis. To address this need ComplianceCourier can examine a set of privileges associated with a user account against the access control security policy to determine if the access rights violate segregation of duties policies.

Integrated Remediation

When policy violations are uncovered, organizations need a mechanism for quickly and efficiently remediating them. ComplianceCourier's integration with AccountCourier, Courion's user access management solution, enables business managers to select and implement an appropriate remediation action directly when a violation has been discovered.

Access Assurance Solution

All of Courion's Access Assurance solutions leverage a common technology platform which provides common services and connectors to customers' existing IT environment. This component - based approach is superior to competitive solutions because it allows Courion solutions to quickly integrate with and leverage a customer's existing directories, databases and help desk systems. It also permits customers to choose which applications they want to implement first, without having to implement a "heavy" infrastructure. This architecture enables customers to easily add new managed systems and new technologies as their business needs change, and as they acquire additional organizations or bring in new applications. Our component- based model also assists Courion in delivering additional capabilities quickly and efficiently − including new features and expanded platform coverage.

Back To top