Terminology Index
Glossary
1 term tagged "meaningful-certification-practice"
Showing 1-1 of 1 term
Meaningful Certification Practice
Running access certification campaigns that actually drive correct access decisions, rather than rubber-stamping exercises, by providing context, focusing on risk, and following through on revocations identified.
Access certifications often degrade into reviewers approving everything without thought, a waste of effort and a governance failure. Meaningful certification practice combats this by giving reviewers context (peer comparisons, last-used data, risk scores), focusing campaigns on the riskiest access rather than all access, scoping reasonably, and ensuring revocations are actually carried out. Done this way, certifications meaningfully reduce excess access; done poorly, they generate paperwork without improving security.
Introduced in: Identity Governance and Administration
Examples
- Showing reviewers peer comparisons and last-used data for each entitlement.
- Focusing a campaign on the riskiest access rather than everything.
- Following through to ensure revocations identified are actually carried out.
No related terms linked yet.