Access review preparation

A manual process for preparing an access review and the evidence an auditor will ask for.

An access review is a process you run, with people and a spreadsheet or ticketing tool. AuthMantra does not run review campaigns; it gives you the user list and the audit log to review from.

Scope

Choose the applications and roles in scope.
Name a reviewer for each, in a person's name.
Set a date for completion.

Collect

Export the people and their roles from each application.
Export the relevant audit log for the period.
Mark leavers and movers from the HR list.

Review

Reviewers confirm or remove each entry.
Record the decision, the reviewer and the date.
Raise exceptions with a reason and an expiry date.

Act and file

Remove the access that was not confirmed.
Check the audit log shows each removal.
Save the folder: scope, exports, decisions and removals.

About this runbook

Use AuthMantra's audit log export and the auditor role to give an independent person read access to the evidence. Check requirements with your auditor.

General information, not legal advice. Published by AuthMantra, Titanium Tech Park, Bidarahalli, Bengaluru 560066.

authmantra.com/praxis/run/access-review-preparation/ · info@authmantra.com

Progress

0 of 12 done

Joiner, mover, leaver: access that follows HRLesson Merging two directories after an acquisitionField note Joiner, mover, leaver: the offboarding checklistField note LexiconTerms used here

Want help applying this?

We are happy to walk through it with your team.

Book a consultation Start free trial

Praxis by AuthMantra

Learn it. Build it. Run it.

Praxis

Learn Build Run Lexicon

AuthMantra

authmantra.com Pricing Contact Privacy Terms